CVE-2009-2560
published 2009-07-21CVE-2009-2560: Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a…
PriorityP417medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.00%
78.7th percentile
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 1.2.1-1 (bookworm) | wireshark 1.2.1-1 (bookworm) |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 1.2.1-1 | 1.2.1-1 |
| wireshark | wireshark | >= 0 < 1.2.1-1 | 1.2.1-1 |
| wireshark | wireshark | >= 0 < 1.2.1-1 | 1.2.1-1 |
| wireshark | wireshark | >= 0 < 1.2.1-1 | 1.2.1-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
vendor_redhat·2009-07-20·CVSS 5.0
CVE-2009-2560 [MEDIUM] Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.
Statement: Vectors (1) Bluetooth L2CAP and (3) MIOP did not affect the versions of the Wireshark package, as shipped with Red Hat Enterprise Linux 3, 4, or 5.
Debian
CVE-2009-2560: wireshark - Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers t...
vendor_debian·2009·CVSS 5.0
CVE-2009-2560 [MEDIUM] CVE-2009-2560: wireshark - Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers t...
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.
Scope: local
bookworm: resolved (fixed in 1.2.1-1)
bullseye: resolved (fixed in 1.2.1-1)
forky: resolved (fixed in 1.2.1-1)
sid: resolved (fixed in 1.2.1-1)
trixie: resolved (fixed in 1.2.1-1)
GHSA
GHSA-76r9-88g8-fpcq: Multiple unspecified vulnerabilities in Wireshark 1
ghsa_unreviewed·2022-05-02
CVE-2009-2560 [MEDIUM] GHSA-76r9-88g8-fpcq: Multiple unspecified vulnerabilities in Wireshark 1
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.
OSV
CVE-2009-2560: Multiple unspecified vulnerabilities in Wireshark 1
osv·2009-07-21·CVSS 5.0
CVE-2009-2560 [MEDIUM] CVE-2009-2560: Multiple unspecified vulnerabilities in Wireshark 1
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2009-2560 Wireshark: Past-the-buffer read in the MIOP dissector
bugzilla·2009-07-21·CVSS 5.0
CVE-2009-2560 [MEDIUM] CVE-2009-2560 Wireshark: Past-the-buffer read in the MIOP dissector
CVE-2009-2560 Wireshark: Past-the-buffer read in the MIOP dissector
An insufficient user-provided input validation flaw was found
in the Wireshark's MIOP dissector. A remote attacker could
provide a specially-crafted MIOP packet capture file, which
once opened by an unsuspecting user, would attempt to read
past the bounds of allocated buffer, leading to application
(Wireshark) abort.
References:
http://www.wireshark.org/security/wnpa-sec-2009-04.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3652
Reproducer:
https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3243
Upstream patch:
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ziop.c?r1=29095&r2=29094&pathrev=29095&view=patch
Discussion:
This issue does NOT affect the versions of the wireshark package,
as
Bugzilla
CVE-2009-2560 Wireshark: Integer overflow in the Bluetooth L2CAP dissector
bugzilla·2009-07-21·CVSS 5.0
CVE-2009-2560 [MEDIUM] CVE-2009-2560 Wireshark: Integer overflow in the Bluetooth L2CAP dissector
CVE-2009-2560 Wireshark: Integer overflow in the Bluetooth L2CAP dissector
An integer overflow flaw, leading to heap-based buffer overflow was found
in the Wireshark's Bluetooth L2CAP dissector. A remote attacker could
provide a specially-crafted L2CAP packet capture file, which once opened
by an unsuspecting user would lead to denial of service (Wireshark crash).
References:
http://www.wireshark.org/security/wnpa-sec-2009-04.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3572
Reproducer:
https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3179
Upstream patch:
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-btl2cap.c?r1=28884&r2=28883&pathrev=28884&view=patch
Discussion:
This issue does NOT affect the versions of the wireshark package, as shipped
with Red
Bugzilla
CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
bugzilla·2009-07-21·CVSS 5.0
CVE-2009-2560 [MEDIUM] CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)
Issue a) NULL pointer dereference in the RADIUS dissector:
A NULL pointer dereference flaw was found in the Wireshark's RADIUS
dissector. A remote attacker could provide a specially-crafted RADIUS
packet capture file, which once opened by an unsuspecting user would
lead to denial of service (Wireshark crash).
References:
http://www.wireshark.org/security/wnpa-sec-2009-04.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3578
Reproducer:
https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3183
Upstream patch:
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-radius.c?r1=28891&r2=28890&pathrev=28891&view=patch
Discussion:
Information about affected Wireshark versio
http://secunia.com/advisories/35884http://secunia.com/advisories/37175http://secunia.com/advisories/37409http://secunia.com/advisories/37477http://www.debian.org/security/2009/dsa-1942http://www.mandriva.com/security/advisories?name=MDVSA-2009:194http://www.openwall.com/lists/oss-security/2009/07/22/2http://www.securityfocus.com/bid/35748http://www.securityfocus.com/bid/36846http://www.vupen.com/english/advisories/2009/1970http://www.vupen.com/english/advisories/2009/3061http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.htmlhttp://www.wireshark.org/security/wnpa-sec-2009-04.htmlhttp://www.wireshark.org/security/wnpa-sec-2009-08.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/54019https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416http://secunia.com/advisories/35884http://secunia.com/advisories/37175http://secunia.com/advisories/37409http://secunia.com/advisories/37477http://www.debian.org/security/2009/dsa-1942http://www.mandriva.com/security/advisories?name=MDVSA-2009:194http://www.openwall.com/lists/oss-security/2009/07/22/2http://www.securityfocus.com/bid/35748http://www.securityfocus.com/bid/36846http://www.vupen.com/english/advisories/2009/1970http://www.vupen.com/english/advisories/2009/3061http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.htmlhttp://www.wireshark.org/security/wnpa-sec-2009-04.htmlhttp://www.wireshark.org/security/wnpa-sec-2009-08.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/54019https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416
2009-07-21
Published