oss-security - Re: Wireshark - wnpa-sec-2009-05.html && wnpa-sec-2009-06.html -- CVE confirmation and CVE Request

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4AB2CD51.9060303@wireshark.org>
Date: Thu, 17 Sep 2009 16:59:13 -0700
From: Gerald Combs <gerald@...eshark.org>
To: jlieskov@...hat.com
CC: "Steven M. Christey" <coley@...us.mitre.org>, 
 oss-security <oss-security@...ts.openwall.com>
Subject: Re: Wireshark - wnpa-sec-2009-05.html && wnpa-sec-2009-06.html --
 CVE confirmation and CVE Request

Jan Lieskovsky wrote:
> Hello Gerald, Steve, vendors,
> 
>   this is due:
> 
>     http://www.wireshark.org/security/wnpa-sec-2009-05.html
>     http://www.wireshark.org/security/wnpa-sec-2009-06.html
> 
>   Gerald, could you please confirm, that:
> 
>     A, The AFS dissector could crash.   (Bug 3564)
>        Versions affected: 0.9.2 to 1.0.8, 1.2.0
> 
>       is already assigned
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2562 and

That's correct.

> 
>     B, The Infiniband dissector could crash on some platforms.
>        Versions affected: 0.9.2 to 1.0.8, 1.2.0
> 
>        is already assigned
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2563  ?

Correct.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.