4.3

CVE-2008-3137

Exploit
The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wireshark ≫ Wireshark Version0.9.5
Wireshark ≫ Wireshark Version0.99.2
Wireshark ≫ Wireshark Version0.99.3
Wireshark ≫ Wireshark Version0.99.4
Wireshark ≫ Wireshark Version0.99.5
Wireshark ≫ Wireshark Version0.99.6
Wireshark ≫ Wireshark Version0.99.7
Wireshark ≫ Wireshark Version0.99.8
Wireshark ≫ Wireshark Version1.0
Wireshark ≫ Wireshark Version1.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.81% 0.758
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/31687
http://secunia.com/advisories/32091
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.vupen.com/english/advisories/2008/2773
http://secunia.com/advisories/30886
Vendor Advisory
http://secunia.com/advisories/30942
http://secunia.com/advisories/31085
http://secunia.com/advisories/31378
http://secunia.com/advisories/32944
http://security.gentoo.org/glsa/glsa-200808-04.xml
http://securitytracker.com/id?1020404
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
http://www.debian.org/security/2008/dsa-1673
http://www.securityfocus.com/archive/1/493882/100/0/threaded
http://www.securityfocus.com/bid/30020
Patch
Exploit
http://www.vupen.com/english/advisories/2008/1982/references
http://www.wireshark.org/security/wnpa-sec-2008-03.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10860
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15068
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html