CVE-2009-3829 — Wireshark vulnerability

CWE-1896 documents6 sources
Severity
9.3CRITICALNVD
EPSS
5.6%
top 9.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WiresharkDebian Wireshark
Timeline
PublishedOct 30
Latest updateMay 2

Description

Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶debiandebian/wireshark< wireshark 1.2.2-1 (bookworm)
▶Debianwireshark/wireshark< 1.2.2-1+3
▶NVDwireshark/wireshark1.2.1+52

Patches

Patch: anonsvn.wireshark.org ↗Patch: www.kb.cert.org ↗Patch: www.wireshark.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-qq8v-pv8c-pf8x: Integer overflow in wiretap/erf↗2022-05-02
▶
OSV
CVE-2009-3829: Integer overflow in wiretap/erf↗2009-10-30
▶

📋Vendor Advisories

2
Red Hat
wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)↗2009-10-05
▶
Debian
CVE-2009-3829: wireshark - Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attack...↗2009
▶

💬Community

1
Bugzilla
CVE-2009-3829 wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)↗2009-11-02
▶