[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-1578

The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...

CVE-2013-1578

CVE-2013-1578 affects Wireshark MPLS dissector: the dissect_pw_eth_heuristic in epan/dissectors/packet-pw-eth.c mishandles Ethernet-looking values at MPLS data start, enabling a potential denial-of-service loop. Public advisories (openSUSE/SUSE/Debian references) note the issue in Wireshark 1.6.x...