[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-1575

The dissectr3cmdalarmconfigure function in epan/dissectors/packet-assar3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1575

CVE-2013-1575 affects the Wireshark R3 dissector (epan/dissectors/packet-assa_r3.c). Versions impacted: Wireshark 1.6.x prior to 1.6.13 and 1.8.x prior to 1.8.5. Root cause: the R3 dissector fails to handle a certain alarm length in the packet, which can cause a denial of service via an infinite ...