[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-1580

The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...

CVE-2013-1580

CVE-2013-1580 affects Wireshark's DOCSIS CM-STATUS dissector. The dissect_cmstatus_tlv function uses an incorrect data type for a position variable, allowing a remote attacker to cause a denial of service via a malformed packet (infinite loop). Affected versions are Wireshark 1.6.x before 1.6.13 ...