ID CVE-2007-6451
Summary Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
References
Vulnerable Configurations
  • cpe:2.3:a:wireshark:wireshark:0.9.8
    cpe:2.3:a:wireshark:wireshark:0.9.8
  • cpe:2.3:a:wireshark:wireshark:0.9.14
    cpe:2.3:a:wireshark:wireshark:0.9.14
  • cpe:2.3:a:wireshark:wireshark:0.99
    cpe:2.3:a:wireshark:wireshark:0.99
  • cpe:2.3:a:wireshark:wireshark:0.99.0
    cpe:2.3:a:wireshark:wireshark:0.99.0
  • cpe:2.3:a:wireshark:wireshark:0.99.1
    cpe:2.3:a:wireshark:wireshark:0.99.1
  • Wireshark 0.99.2
    cpe:2.3:a:wireshark:wireshark:0.99.2
  • Wireshark 0.99.3
    cpe:2.3:a:wireshark:wireshark:0.99.3
  • Wireshark 0.99.4
    cpe:2.3:a:wireshark:wireshark:0.99.4
  • Wireshark 0.99.5
    cpe:2.3:a:wireshark:wireshark:0.99.5
  • Wireshark 0.99.6
    cpe:2.3:a:wireshark:wireshark:0.99.6
CVSS
Base: 4.3 (as of 20-12-2007 - 11:25)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
nessus via4
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-1446.NASL
    description Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6450 The RPL dissector could be tricked into an infinite loop. - CVE-2007-6451 The CIP dissector could be tricked into excessive memory allocation.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 29840
    published 2008-01-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29840
    title Debian DSA-1446-1 : wireshark - several vulnerabilities
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-200712-23.NASL
    description The remote host is affected by the vulnerability described in GLSA-200712-23 (Wireshark: Multiple vulnerabilities) Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP (CVE-2007-6111), PPP (CVE-2007-6112), DNP (CVE-2007-6113), SSL and iSeries (OS/400) Communication traces (CVE-2007-6114), ANSI MAP (CVE-2007-6115), Firebird/Interbase (CVE-2007-6116), HTTP (CVE-2007-6117), MEGACO (CVE-2007-6118), DCP ETSI (CVE-2007-6119), Bluetooth SDP (CVE-2007-6120), RPC Portmap (CVE-2007-6121), SMB (CVE-2007-6438), IPv6 amd USB (CVE-2007-6439), WiMAX (CVE-2007-6441), RPL (CVE-2007-6450), CIP (CVE-2007-6451). The vulnerabilities were discovered by Stefan Esser, Beyond Security, Fabiodds, Peter Leeming, Steve and ainsley. Impact : A remote attacker could send specially crafted packets on a network being monitored with Wireshark or entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark (which might be the root user), or a Denial of Service. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-11
    plugin id 29820
    published 2007-12-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29820
    title GLSA-200712-23 : Wireshark: Multiple vulnerabilities
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2008-0059.NASL
    description From Red Hat Security Advisory 2008:0059 : Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 67643
    published 2013-07-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=67643
    title Oracle Linux 3 : wireshark (ELSA-2008-0059)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 43670
    published 2010-01-06
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=43670
    title CentOS 4 / 5 : wireshark (CESA-2008:0058)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2008-001.NASL
    description A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or arbitrary code execution. This update provides Wireshark 0.99.7 which is not vulnerable to these issues. An updated version of libsmi is also being provided, not because of security issues, but because this version of wireshark uses it instead of net-snmp for SNMP support. Update : This update is being reissued without libcap (kernel capabilities) support, as that is not required by the original released packages, and thus gave trouble for a number of users.
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 36583
    published 2009-04-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=36583
    title Mandriva Linux Security Advisory : wireshark (MDVSA-2008:001-1)
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_8A835235AE8411DCA5F9001A4D49522B.NASL
    description The Wireshark team reports of multiple vulnerabilities : - Wireshark could crash when reading an MP3 file. - Beyond Security discovered that Wireshark could loop excessively while reading a malformed DNP packet. - Stefan Esser discovered a buffer overflow in the SSL dissector. - The ANSI MAP dissector could be susceptible to a buffer overflow on some platforms. - The Firebird/Interbase dissector could go into an infinite loop or crash. - The NCP dissector could cause a crash. - The HTTP dissector could crash on some systems while decoding chunked messages. - The MEGACO dissector could enter a large loop and consume system resources. - The DCP ETSI dissector could enter a large loop and consume system resources. - Fabiodds discovered a buffer overflow in the iSeries (OS/400) Communication trace file parser. - The PPP dissector could overflow a buffer. - The Bluetooth SDP dissector could go into an infinite loop. - A malformed RPC Portmap packet could cause a crash. - The IPv6 dissector could loop excessively. - The USB dissector could loop excessively or crash. - The SMB dissector could crash. - The RPL dissector could go into an infinite loop. - The WiMAX dissector could crash due to unaligned access on some platforms. - The CIP dissector could attempt to allocate a huge amount of memory and crash. Impact It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
    last seen 2019-02-21
    modified 2018-11-21
    plugin id 29772
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29772
    title FreeBSD : wireshark -- multiple vulnerabilities (8a835235-ae84-11dc-a5f9-001a4d49522b)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-27
    plugin id 30034
    published 2008-01-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30034
    title RHEL 4 / 5 : wireshark (RHSA-2008:0058)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2008-0059.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-27
    plugin id 30035
    published 2008-01-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30035
    title RHEL 3 : wireshark (RHSA-2008:0059)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2008-0059.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 30044
    published 2008-01-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30044
    title CentOS 3 : wireshark (CESA-2008:0059)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2008-0058.NASL
    description From Red Hat Security Advisory 2008:0058 : Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 67642
    published 2013-07-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=67642
    title Oracle Linux 4 / 5 : wireshark (ELSA-2008-0058)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20080121_WIRESHARK_ON_SL3_X.NASL
    description Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata.
    last seen 2019-02-21
    modified 2019-01-07
    plugin id 60350
    published 2012-08-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=60350
    title Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
oval via4
accepted 2013-04-29T04:21:20.220-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 3
    oval oval:org.mitre.oval:def:11782
  • comment CentOS Linux 3.x
    oval oval:org.mitre.oval:def:16651
  • comment The operating system installed on the system is Red Hat Enterprise Linux 4
    oval oval:org.mitre.oval:def:11831
  • comment CentOS Linux 4.x
    oval oval:org.mitre.oval:def:16636
  • comment Oracle Linux 4.x
    oval oval:org.mitre.oval:def:15990
  • comment The operating system installed on the system is Red Hat Enterprise Linux 5
    oval oval:org.mitre.oval:def:11414
  • comment The operating system installed on the system is CentOS Linux 5.x
    oval oval:org.mitre.oval:def:15802
  • comment Oracle Linux 5.x
    oval oval:org.mitre.oval:def:15459
description Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
family unix
id oval:org.mitre.oval:def:9685
status accepted
submitted 2010-07-09T03:56:16-04:00
title Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
version 24
redhat via4
advisories
  • bugzilla
    id 427254
    title CVE-2007-6451 wireshark CIP dissector crash
    oval
    OR
    • AND
      • comment Red Hat Enterprise Linux 4 is installed
        oval oval:com.redhat.rhsa:tst:20060016001
      • OR
        • AND
          • comment wireshark is earlier than 0:0.99.7-1.el4
            oval oval:com.redhat.rhsa:tst:20080058002
          • comment wireshark is signed with Red Hat master key
            oval oval:com.redhat.rhsa:tst:20060726003
        • AND
          • comment wireshark-gnome is earlier than 0:0.99.7-1.el4
            oval oval:com.redhat.rhsa:tst:20080058004
          • comment wireshark-gnome is signed with Red Hat master key
            oval oval:com.redhat.rhsa:tst:20060726005
        • AND
          • comment libsmi is earlier than 0:0.4.5-2.el4
            oval oval:com.redhat.rhsa:tst:20080058006
          • comment libsmi is signed with Red Hat master key
            oval oval:com.redhat.rhsa:tst:20080058007
        • AND
          • comment libsmi-devel is earlier than 0:0.4.5-2.el4
            oval oval:com.redhat.rhsa:tst:20080058008
          • comment libsmi-devel is signed with Red Hat master key
            oval oval:com.redhat.rhsa:tst:20080058009
    • AND
      • comment Red Hat Enterprise Linux 5 is installed
        oval oval:com.redhat.rhsa:tst:20070055001
      • OR
        • AND
          • comment wireshark is earlier than 0:0.99.7-1.el5
            oval oval:com.redhat.rhsa:tst:20080058011
          • comment wireshark is signed with Red Hat redhatrelease key
            oval oval:com.redhat.rhsa:tst:20070066011
        • AND
          • comment wireshark-gnome is earlier than 0:0.99.7-1.el5
            oval oval:com.redhat.rhsa:tst:20080058013
          • comment wireshark-gnome is signed with Red Hat redhatrelease key
            oval oval:com.redhat.rhsa:tst:20070066013
        • AND
          • comment libsmi is earlier than 0:0.4.5-2.el5
            oval oval:com.redhat.rhsa:tst:20080058015
          • comment libsmi is signed with Red Hat redhatrelease key
            oval oval:com.redhat.rhsa:tst:20080058016
        • AND
          • comment libsmi-devel is earlier than 0:0.4.5-2.el5
            oval oval:com.redhat.rhsa:tst:20080058017
          • comment libsmi-devel is signed with Red Hat redhatrelease key
            oval oval:com.redhat.rhsa:tst:20080058018
    rhsa
    id RHSA-2008:0058
    released 2008-01-21
    severity Moderate
    title RHSA-2008:0058: wireshark security update (Moderate)
  • bugzilla
    id 427254
    title CVE-2007-6451 wireshark CIP dissector crash
    oval
    AND
    • comment Red Hat Enterprise Linux 3 is installed
      oval oval:com.redhat.rhsa:tst:20060015001
    • OR
      • AND
        • comment libsmi is earlier than 0:0.4.5-3.el3
          oval oval:com.redhat.rhsa:tst:20080059002
        • comment libsmi is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20080058007
      • AND
        • comment libsmi-devel is earlier than 0:0.4.5-3.el3
          oval oval:com.redhat.rhsa:tst:20080059004
        • comment libsmi-devel is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20080058009
      • AND
        • comment wireshark is earlier than 0:0.99.7-EL3.1
          oval oval:com.redhat.rhsa:tst:20080059006
        • comment wireshark is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20060726003
      • AND
        • comment wireshark-gnome is earlier than 0:0.99.7-EL3.1
          oval oval:com.redhat.rhsa:tst:20080059008
        • comment wireshark-gnome is signed with Red Hat master key
          oval oval:com.redhat.rhsa:tst:20060726005
    rhsa
    id RHSA-2008:0059
    released 2008-01-21
    severity Moderate
    title RHSA-2008:0059: wireshark security update (Moderate)
rpms
  • wireshark-0:0.99.7-1.el4
  • wireshark-gnome-0:0.99.7-1.el4
  • libsmi-0:0.4.5-2.el4
  • libsmi-devel-0:0.4.5-2.el4
  • wireshark-0:0.99.7-1.el5
  • wireshark-gnome-0:0.99.7-1.el5
  • libsmi-0:0.4.5-2.el5
  • libsmi-devel-0:0.4.5-2.el5
  • libsmi-0:0.4.5-3.el3
  • libsmi-devel-0:0.4.5-3.el3
  • wireshark-0:0.99.7-EL3.1
  • wireshark-gnome-0:0.99.7-EL3.1
refmap via4
bid 27071
bugtraq 20080103 rPSA-2008-0004-1 tshark wireshark
confirm
debian DSA-1446
gentoo GLSA-200712-23
mandriva
  • MDVSA-2008:001
  • MDVSA-2008:1
misc http://bugs.gentoo.org/show_bug.cgi?id=199958
secunia
  • 27777
  • 28288
  • 28304
  • 28315
  • 28325
  • 28564
  • 28583
  • 29048
suse SUSE-SR:2008:004
xf wireshark-cip-dissector-dos(39187)
Last major update 21-08-2010 - 01:14
Published 19-12-2007 - 17:46
Last modified 15-10-2018 - 17:54
Back to Top