Bug 2974 - multiple security issues for wireshark: CVE-2011-3482, CVE-2011-3360, CVE-2011-3483, CVE-2011-3484
Summary: multiple security issues for wireshark: CVE-2011-3482, CVE-2011-3360, CVE-201...
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 1
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Florian Hubold
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-08 10:05 CEST by Florian Hubold
Modified: 2011-10-17 15:13 CEST (History)
0 users

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description Florian Hubold 2011-10-08 10:05:20 CEST
Description of problem:

CVE-2011-3482

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

CVE-2011-3483

Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."

CVE-2011-3484

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service (loop and application crash) via a malformed packet.
Florian Hubold 2011-10-08 10:05:43 CEST

Status: NEW => ASSIGNED

Comment 1 Florian Hubold 2011-10-17 15:13:33 CEST
Cauldron wireshark package is not susceptible for these security issues, and for Mageia 1 those issues are fixed with the validated update from https://bugs.mageia.org/show_bug.cgi?id=2352

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.