Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
seebugRootSSV:1941
HistoryJun 29, 2007 - 12:00 a.m.

Wireshark多个协议处理模块远程拒绝服务漏洞

2007-06-2900:00:00
Root
www.seebug.org
25

0.028 Low

EPSS

Percentile

90.7%

JSON

BUGTRAQ ID: 24662
CVE(CAN) ID: CVE-2007-3389,CVE-2007-3390,CVE-2007-3391,CVE-2007-3392,CVE-2007-3393

Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。

Wireshark的多个协议解析模块实现上存在漏洞，远程攻击者可能利用此漏洞导致控制用户机器。

如果处理了HTTP响应中的分块编码、特制iSeries抓包文件、畸形DCP ETSI报文、畸形SSL或MMS报文，就可能触发死循环或耗尽大量系统内存，导致拒绝服务；此外Wireshark的DHCP/BOOTP协议处理模块还存在单字节错误，允许远程攻击者通过DHCP-over-DOCSIS报文导致系统崩溃。

Wireshark < 0.99.6
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

<a href=“http://www.wireshark.org/download.html” target=“_blank”>http://www.wireshark.org/download.html</a>

Related

openvas 17
centos 2
nessus 18
oraclelinux 2
redhat 3
altlinux 1
gentoo 1
freebsd 1
securityvulns 2
osv 1
debian 1
cvelist 5
ubuntucve 5
prion 5
nvd 5
debiancve 5
veracode 5
cve 5
openvas
openvas
Gentoo Security Advisory GLSA 200708-12 (wireshark)
2008-09-24 00:00:00
Oracle: Security Advisory (ELSA-2007-0710)
2015-10-08 00:00:00
Mandriva Update for wireshark MDKSA-2007:145 (wireshark)
2009-04-09 00:00:00
centos
centos
wireshark security update
2007-11-15 17:20:39
libsmi, wireshark security update
2008-01-21 15:05:11
nessus
nessus
CentOS 4 : wireshark (CESA-2007:0709)
2013-06-29 00:00:00
Oracle Linux 5 : wireshark (ELSA-2007-0710)
2023-09-07 00:00:00
Scientific Linux Security Update : wireshark on SL4.x i386/x86_64
2012-08-01 00:00:00
oraclelinux
oraclelinux
wireshark security update
2007-11-19 00:00:00
wireshark security and bug fix update
2007-11-27 00:00:00
redhat
redhat
(RHSA-2007:0710) Low: wireshark security update
2007-11-07 00:00:00
(RHSA-2007:0709) Low: wireshark security and bug fix update
2007-11-15 00:00:00
(RHSA-2008:0059) Moderate: wireshark security update
2008-01-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package wireshark version 0.99.6-alt1
2007-07-06 00:00:00
gentoo
gentoo
Wireshark: Multiple vulnerabilities
2007-08-16 00:00:00
freebsd
freebsd
wireshark -- Multiple problems
2007-06-29 00:00:00
securityvulns
securityvulns
Wireshark DoS
2007-08-17 00:00:00
[Full-disclosure] [SECURITY] [DSA 1322-1] New wireshark packages fix denial of service
2007-06-28 00:00:00
osv
osv
wireshark
2007-06-27 00:00:00
debian
debian
[SECURITY] [DSA 1322-1] New wireshark packages fix denial of service
2007-06-27 20:57:25
cvelist
cvelist
CVE-2007-3391
2007-06-26 00:00:00
CVE-2007-3393
2007-06-26 00:00:00
CVE-2007-3392
2007-06-26 00:00:00
ubuntucve
ubuntucve
CVE-2007-3391
2007-06-26 00:00:00
CVE-2007-3393
2007-06-26 00:00:00
CVE-2007-3392
2007-06-26 00:00:00
prion
prion
Design/Logic Flaw
2007-06-26 00:30:00
Code injection
2007-06-26 00:30:00
Code injection
2007-06-26 00:30:00
nvd
nvd
CVE-2007-3391
2007-06-26 00:30:00
CVE-2007-3393
2007-06-26 00:30:00
CVE-2007-3392
2007-06-26 00:30:00
debiancve
debiancve
CVE-2007-3391
2007-06-26 00:30:00
CVE-2007-3392
2007-06-26 00:30:00
CVE-2007-3393
2007-06-26 00:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:04
Denial Of Service (DoS)
2020-04-10 00:15:04
Denial Of Service (DoS)
2020-04-10 00:15:04
cve
cve
CVE-2007-3393
2007-06-26 00:30:00
CVE-2007-3391
2007-06-26 00:30:00
CVE-2007-3392
2007-06-26 00:30:00

0.028 Low

EPSS

Percentile

90.7%

JSON
Related for SSV:1941
openvas17centos2nessus18oraclelinux2redhat3altlinux1gentoo1freebsd1securityvulns2osv1debian1cvelist5ubuntucve5prion5nvd5debiancve5veracode5cve5