CVE-2009-3241

Severity

78%

Complexity

99%

Confidentiality

115%

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

Type

Wireshark

First reported 15 years ago

2009-09-18 10:30:00

Last updated 7 years ago

2017-09-19 01:29:00

Affected Software

Wireshark 0.99.6

0.99.6

Wireshark 0.99.7

0.99.7

Wireshark 0.99.8

0.99.8

Wireshark 1.0.0

1.0.0

Wireshark 1.0.1

1.0.1

Wireshark 1.0.2

1.0.2

Wireshark 1.0.3

1.0.3

Wireshark 1.0.4

1.0.4

Wireshark 1.0.5

1.0.5

Wireshark 1.0.6

1.0.6

Wireshark 1.0.7

1.0.7

Wireshark 1.0.8

1.0.8

Wireshark 1.2.0

1.2.0

Wireshark 1.2.1

1.2.1

References

SUSE-SR:2009:016

36754

Vendor Advisory

37409

37477

DSA-1942

36408

Exploit

http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html

http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html

http://www.wireshark.org/security/wnpa-sec-2009-05.html

Patch, Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2009-06.html