Lucene search

K
osvGoogleOSV:DSA-1983-1
HistoryJan 30, 2010 - 12:00 a.m.

wireshark - several vulnerabilities

2010-01-3000:00:00
Google
osv.dev
13

EPSS

0.939

Percentile

99.2%

Several remote vulnerabilities have been discovered in the Wireshark
network traffic analyzer, which may lead to the execution of arbitrary
code or denial of service. The Common Vulnerabilities and Exposures
project identifies the following problems:

  • CVE-2009-4377
    A NULL pointer dereference was found in the SMB/SMB2 dissectors.
  • CVE-2010-0304
    Several buffer overflows were found in the LWRES dissector.

For the stable distribution (lenny), these problems have been fixed in
version 1.0.2-3+lenny8.

For the unstable distribution (sid) these problems have been fixed in
version 1.2.6-1.

We recommend that you upgrade your Wireshark packages.