3.3

CVE-2008-3933

Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wireshark ≫ Wireshark Version0.10.2
Wireshark ≫ Wireshark Version0.10.3
Wireshark ≫ Wireshark Version0.10.4
Wireshark ≫ Wireshark Version0.10.5
Wireshark ≫ Wireshark Version0.10.6
Wireshark ≫ Wireshark Version0.10.7
Wireshark ≫ Wireshark Version0.10.8
Wireshark ≫ Wireshark Version0.10.9
Wireshark ≫ Wireshark Version0.10.14
Wireshark ≫ Wireshark Version0.99.0
Wireshark ≫ Wireshark Version0.99.1
Wireshark ≫ Wireshark Version0.99.2
Wireshark ≫ Wireshark Version0.99.3
Wireshark ≫ Wireshark Version0.99.4
Wireshark ≫ Wireshark Version0.99.5
Wireshark ≫ Wireshark Version0.99.6
Wireshark ≫ Wireshark Version0.99.6a
Wireshark ≫ Wireshark Version0.99.7
Wireshark ≫ Wireshark Version0.99.8
Wireshark ≫ Wireshark Version1.0.0
Wireshark ≫ Wireshark Version1.0.1
Wireshark ≫ Wireshark Version1.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.451
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32091
http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm
http://www.redhat.com/support/errata/RHSA-2008-0890.html
http://www.vupen.com/english/advisories/2008/2773
http://secunia.com/advisories/32944
http://www.debian.org/security/2008/dsa-1673
http://secunia.com/advisories/31864
http://secunia.com/advisories/31886
http://secunia.com/advisories/32028
http://security.gentoo.org/glsa/glsa-200809-17.xml
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278
http://www.mandriva.com/security/advisories?name=MDVSA-2008:199
http://www.securityfocus.com/archive/1/496487/100/0/threaded
http://www.securitytracker.com/id?1020819
http://www.wireshark.org/security/wnpa-sec-2008-05.html
Patch
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html
http://www.vupen.com/english/advisories/2008/2493
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2649
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9620