ID CVE-2007-6118
Summary The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:ethereal_group:ethereal:0.9.14
    cpe:2.3:a:ethereal_group:ethereal:0.9.14
  • cpe:2.3:a:ethereal_group:ethereal:0.9.15
    cpe:2.3:a:ethereal_group:ethereal:0.9.15
  • cpe:2.3:a:ethereal_group:ethereal:0.9.16
    cpe:2.3:a:ethereal_group:ethereal:0.9.16
  • cpe:2.3:a:ethereal_group:ethereal:0.99.0
    cpe:2.3:a:ethereal_group:ethereal:0.99.0
  • cpe:2.3:a:wireshark:wireshark:0.99
    cpe:2.3:a:wireshark:wireshark:0.99
  • cpe:2.3:a:wireshark:wireshark:0.99.0
    cpe:2.3:a:wireshark:wireshark:0.99.0
  • cpe:2.3:a:wireshark:wireshark:0.99.1
    cpe:2.3:a:wireshark:wireshark:0.99.1
  • Wireshark 0.99.2
    cpe:2.3:a:wireshark:wireshark:0.99.2
  • Wireshark 0.99.3
    cpe:2.3:a:wireshark:wireshark:0.99.3
  • Wireshark 0.99.4
    cpe:2.3:a:wireshark:wireshark:0.99.4
  • Wireshark 0.99.5
    cpe:2.3:a:wireshark:wireshark:0.99.5
  • Wireshark 0.99.6
    cpe:2.3:a:wireshark:wireshark:0.99.6
CVSS
Base: 7.8 (as of 26-11-2007 - 22:06)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
nessus via4
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2007-4690.NASL
    description upgrade to 0.99.7 fixes various security flaws. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-12-08
    plugin id 29766
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29766
    title Fedora 7 : wireshark-0.99.7-1.fc7 (2007-4690)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-1446.NASL
    description Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6450 The RPL dissector could be tricked into an infinite loop. - CVE-2007-6451 The CIP dissector could be tricked into excessive memory allocation.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 29840
    published 2008-01-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29840
    title Debian DSA-1446-1 : wireshark - several vulnerabilities
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-200712-23.NASL
    description The remote host is affected by the vulnerability described in GLSA-200712-23 (Wireshark: Multiple vulnerabilities) Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP (CVE-2007-6111), PPP (CVE-2007-6112), DNP (CVE-2007-6113), SSL and iSeries (OS/400) Communication traces (CVE-2007-6114), ANSI MAP (CVE-2007-6115), Firebird/Interbase (CVE-2007-6116), HTTP (CVE-2007-6117), MEGACO (CVE-2007-6118), DCP ETSI (CVE-2007-6119), Bluetooth SDP (CVE-2007-6120), RPC Portmap (CVE-2007-6121), SMB (CVE-2007-6438), IPv6 amd USB (CVE-2007-6439), WiMAX (CVE-2007-6441), RPL (CVE-2007-6450), CIP (CVE-2007-6451). The vulnerabilities were discovered by Stefan Esser, Beyond Security, Fabiodds, Peter Leeming, Steve and ainsley. Impact : A remote attacker could send specially crafted packets on a network being monitored with Wireshark or entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark (which might be the root user), or a Denial of Service. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-11
    plugin id 29820
    published 2007-12-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29820
    title GLSA-200712-23 : Wireshark: Multiple vulnerabilities
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-1414.NASL
    description Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service or execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6114 Stefan Esser discovered a buffer overflow in the SSL dissector.'Fabiodds' discovered a buffer overflow in the iSeries trace dissector. - CVE-2007-6117 A programming error was discovered in the HTTP dissector, which may lead to denial of service. - CVE-2007-6118 The MEGACO dissector could be tricked into resource exhaustion. - CVE-2007-6120 The Bluetooth SDP dissector could be tricked into an endless loop. - CVE-2007-6121 The RPC portmap dissector could be tricked into dereferencing a NULL pointer.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 28337
    published 2007-11-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=28337
    title Debian DSA-1414-1 : wireshark - several vulnerabilities
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2008-0059.NASL
    description From Red Hat Security Advisory 2008:0059 : Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 67643
    published 2013-07-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=67643
    title Oracle Linux 3 : wireshark (ELSA-2008-0059)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2007-4590.NASL
    description Various flaws fixed by upgrade to 0.99.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-12-08
    plugin id 29760
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29760
    title Fedora 8 : wireshark-0.99.7-2.fc8 (2007-4590)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 43670
    published 2010-01-06
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=43670
    title CentOS 4 / 5 : wireshark (CESA-2008:0058)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2008-001.NASL
    description A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or arbitrary code execution. This update provides Wireshark 0.99.7 which is not vulnerable to these issues. An updated version of libsmi is also being provided, not because of security issues, but because this version of wireshark uses it instead of net-snmp for SNMP support. Update : This update is being reissued without libcap (kernel capabilities) support, as that is not required by the original released packages, and thus gave trouble for a number of users.
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 36583
    published 2009-04-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=36583
    title Mandriva Linux Security Advisory : wireshark (MDVSA-2008:001-1)
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_8A835235AE8411DCA5F9001A4D49522B.NASL
    description The Wireshark team reports of multiple vulnerabilities : - Wireshark could crash when reading an MP3 file. - Beyond Security discovered that Wireshark could loop excessively while reading a malformed DNP packet. - Stefan Esser discovered a buffer overflow in the SSL dissector. - The ANSI MAP dissector could be susceptible to a buffer overflow on some platforms. - The Firebird/Interbase dissector could go into an infinite loop or crash. - The NCP dissector could cause a crash. - The HTTP dissector could crash on some systems while decoding chunked messages. - The MEGACO dissector could enter a large loop and consume system resources. - The DCP ETSI dissector could enter a large loop and consume system resources. - Fabiodds discovered a buffer overflow in the iSeries (OS/400) Communication trace file parser. - The PPP dissector could overflow a buffer. - The Bluetooth SDP dissector could go into an infinite loop. - A malformed RPC Portmap packet could cause a crash. - The IPv6 dissector could loop excessively. - The USB dissector could loop excessively or crash. - The SMB dissector could crash. - The RPL dissector could go into an infinite loop. - The WiMAX dissector could crash due to unaligned access on some platforms. - The CIP dissector could attempt to allocate a huge amount of memory and crash. Impact It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    last seen 2019-02-21
    modified 2018-11-21
    plugin id 29772
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29772
    title FreeBSD : wireshark -- multiple vulnerabilities (8a835235-ae84-11dc-a5f9-001a4d49522b)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-27
    plugin id 30034
    published 2008-01-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30034
    title RHEL 4 / 5 : wireshark (RHSA-2008:0058)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2008-0059.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-27
    plugin id 30035
    published 2008-01-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30035
    title RHEL 3 : wireshark (RHSA-2008:0059)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2008-0059.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 30044
    published 2008-01-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30044
    title CentOS 3 : wireshark (CESA-2008:0059)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2008-0058.NASL
    description From Red Hat Security Advisory 2008:0058 : Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 67642
    published 2013-07-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=67642
    title Oracle Linux 4 / 5 : wireshark (ELSA-2008-0058)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20080121_WIRESHARK_ON_SL3_X.NASL
    description Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata.
    last seen 2019-02-21
    modified 2019-01-07
    plugin id 60350
    published 2012-08-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=60350
    title Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
oval via4
accepted 2013-04-29T04:07:30.456-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 3
    oval oval:org.mitre.oval:def:11782
  • comment CentOS Linux 3.x
    oval oval:org.mitre.oval:def:16651
  • comment The operating system installed on the system is Red Hat Enterprise Linux 4
    oval oval:org.mitre.oval:def:11831
  • comment CentOS Linux 4.x
    oval oval:org.mitre.oval:def:16636
  • comment Oracle Linux 4.x
    oval oval:org.mitre.oval:def:15990
  • comment The operating system installed on the system is Red Hat Enterprise Linux 5
    oval oval:org.mitre.oval:def:11414
  • comment The operating system installed on the system is CentOS Linux 5.x
    oval oval:org.mitre.oval:def:15802
  • comment Oracle Linux 5.x
    oval oval:org.mitre.oval:def:15459
description The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
family unix
id oval:org.mitre.oval:def:10659
status accepted
submitted 2010-07-09T03:56:16-04:00
title The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
version 24
redhat via4
advisories
  • rhsa
    id RHSA-2008:0058
  • rhsa
    id RHSA-2008:0059
rpms
  • wireshark-0:0.99.7-1.el4
  • wireshark-gnome-0:0.99.7-1.el4
  • libsmi-0:0.4.5-2.el4
  • libsmi-devel-0:0.4.5-2.el4
  • wireshark-0:0.99.7-1.el5
  • wireshark-gnome-0:0.99.7-1.el5
  • libsmi-0:0.4.5-2.el5
  • libsmi-devel-0:0.4.5-2.el5
  • libsmi-0:0.4.5-3.el3
  • libsmi-devel-0:0.4.5-3.el3
  • wireshark-0:0.99.7-EL3.1
  • wireshark-gnome-0:0.99.7-EL3.1
refmap via4
bid 26532
bugtraq 20080103 rPSA-2008-0004-1 tshark wireshark
confirm
debian DSA-1414
fedora
  • FEDORA-2007-4590
  • FEDORA-2007-4690
gentoo GLSA-200712-23
mandriva
  • MDVSA-2008:001
  • MDVSA-2008:1
misc http://bugs.gentoo.org/show_bug.cgi?id=199958
sectrack 1018988
secunia
  • 27777
  • 27817
  • 28197
  • 28207
  • 28288
  • 28304
  • 28325
  • 28564
  • 28583
  • 29048
suse SUSE-SR:2008:004
vupen ADV-2007-3956
Last major update 07-03-2011 - 22:01
Published 23-11-2007 - 15:46
Last modified 15-10-2018 - 17:50
Back to Top