CVE-2009-3551 — Off-by-one Error in Wireshark

CWE-189 CWE-193 — Off-by-one Error6 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

0.7%

top 27.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wireshark Debian Wireshark

Timeline

PublishedOct 30

Latest updateMay 2

Description

Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 1.2.3-1 (bookworm)

▶Debianwireshark/wireshark< 1.2.3-1+3

▶NVDwireshark/wireshark1.2, 1.2.0, 1.2.1+2

Patches

Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗Patch: www.wireshark.org ↗

🔴Vulnerability Details

GHSA

GHSA-5mcv-3rv5-g5x6: Off-by-one error in the dissect_negprot_response function in packet-smb↗2022-05-02

▶

OSV

CVE-2009-3551: Off-by-one error in the dissect_negprot_response function in packet-smb↗2009-10-30

▶

📋Vendor Advisories

Red Hat

Wireshark: Off-by-one error in the Samba dissector↗2009-10-27

▶

Debian

CVE-2009-3551: wireshark - Off-by-one error in the dissect_negprot_response function in packet-smb.c in the...↗2009

▶

💬Community

Bugzilla

CVE-2009-3551 Wireshark: Off-by-one error in the Samba dissector↗2009-10-27

▶