Vulnerabilidad en Vulnerabilidad en Wireshark 0.99.5 (CVE-2007-3391)
Gravedad CVSS v2.0:
ALTA
Tipo:
CWE-20
Validación incorrecta de entrada
Fecha de publicación:
26/06/2007
Última modificación:
09/04/2025
Descripción
Wireshark 0.99.5 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) con un paquete DCP ETSI mal formado que provoca un bucle infinito.
Impacto
Puntuación base 2.0
7.80
Gravedad 2.0
ALTA
Productos y versiones vulnerables
CPE | Desde | Hasta |
---|---|---|
cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://osvdb.org/37641
- http://secunia.com/advisories/25833
- http://secunia.com/advisories/25987
- http://secunia.com/advisories/26004
- http://secunia.com/advisories/26499
- http://secunia.com/advisories/28583
- http://security.gentoo.org/glsa/glsa-200708-12.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2007%3A145
- http://www.novell.com/linux/security/advisories/2007_15_sr.html
- http://www.redhat.com/support/errata/RHSA-2007-0709.html
- http://www.redhat.com/support/errata/RHSA-2007-0710.html
- http://www.redhat.com/support/errata/RHSA-2008-0059.html
- http://www.securityfocus.com/bid/24662
- http://www.securitytracker.com/id?1018315=
- http://www.vupen.com/english/advisories/2007/2353
- http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html
- http://www.wireshark.org/security/wnpa-sec-2007-02.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35204
- https://issues.rpath.com/browse/RPL-1498
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911
- http://osvdb.org/37641
- http://secunia.com/advisories/25833
- http://secunia.com/advisories/25987
- http://secunia.com/advisories/26004
- http://secunia.com/advisories/26499
- http://secunia.com/advisories/28583
- http://security.gentoo.org/glsa/glsa-200708-12.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2007%3A145
- http://www.novell.com/linux/security/advisories/2007_15_sr.html
- http://www.redhat.com/support/errata/RHSA-2007-0709.html
- http://www.redhat.com/support/errata/RHSA-2007-0710.html
- http://www.redhat.com/support/errata/RHSA-2008-0059.html
- http://www.securityfocus.com/bid/24662
- http://www.securitytracker.com/id?1018315=
- http://www.vupen.com/english/advisories/2007/2353
- http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html
- http://www.wireshark.org/security/wnpa-sec-2007-02.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35204
- https://issues.rpath.com/browse/RPL-1498
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911