oss-security - Re: CVE request: Wireshark <1.2.1 Multiple DoS

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4A6DB87B.1000801@redhat.com>
Date: Mon, 27 Jul 2009 16:23:55 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: Wireshark <1.2.1 Multiple DoS

Hello Steve,

   any progress while splitting this CVE id into two different ones?
(or will we need to address the problem of different vulnerable 
Wireshark versions in relevant dissectors in some other way?)

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Jan Lieskovsky wrote:
> Hello Steve, vendors,
> 
>   1, thank you for the prompt assignment. 
> 
>   2, what's related to:
> 
>     Name: CVE-2009-2560
>     Status: Candidate
>     URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2560
>     Final-Decision: 
>     Interim-Decision: 
>     Modified: 
>     Proposed: 
>     Assigned: 20090721
>     Category: 
>     Reference: CONFIRM:http://www.wireshark.org/security/wnpa-sec-2009-04.html
>     Reference: BID:35748
>     Reference: URL:http://www.securityfocus.com/bid/35748
>     Reference: SECUNIA:35884
>     Reference: URL:http://secunia.com/advisories/35884
>     Reference: VUPEN:ADV-2009-1970
>     Reference: URL:http://www.vupen.com/english/advisories/2009/1970
> 
>     Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote
>     attackers to cause a denial of service (crash) via unspecified vectors
>     in the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissectors.
> 
>     This one will need to be split into two different ones, because:
> 
>     a, the Bluetooth L2CAP and MIOP dissectors flaws are affecting only
>        version Wireshark 1.2.0 (as mentioned in upstream's 
>        wnpa-sec-2009-04.html)
> 
>     b, but the RADIUS dissector issue affects also prior versions of
>        Wireshark -- issue / crash confirmed also in upstreams 
>        Wireshark-1.0.8.
> 
>   Could you please split the CVE-2009-2560 into two CVE ids?
>   (one for the L2CAP, MIOP dissectors, other one for
>    the RADIUS).
> 
> Thanks && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Response Team
> 
> P.S.: Affected Wireshark versions in other CVE identifiers
>       assigned within this update are sane.
>

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.