fkie_cve-2009-4377
Vulnerability from fkie_nvd
Published
2009-12-21 21:30
Modified
2025-04-09 00:30
Severity ?
Summary
The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.
References
cve@mitre.orghttp://osvdb.org/61178
cve@mitre.orghttp://secunia.com/advisories/37842Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/37916
cve@mitre.orghttp://www.debian.org/security/2009/dsa-1983
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2010:031
cve@mitre.orghttp://www.securityfocus.com/bid/37407Exploit
cve@mitre.orghttp://www.securitytracker.com/id?1023374
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/3596Vendor Advisory
cve@mitre.orghttp://www.wireshark.org/security/wnpa-sec-2009-09.htmlVendor Advisory
cve@mitre.orghttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301Exploit
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/61178
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/37842Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/37916
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2009/dsa-1983
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/37407Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1023374
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/3596Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.wireshark.org/security/wnpa-sec-2009-09.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301Exploit
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html
Impacted products
Vendor Product Version
wireshark wireshark 0.9.2
wireshark wireshark 0.9.5
wireshark wireshark 0.9.6
wireshark wireshark 0.9.7
wireshark wireshark 0.9.8
wireshark wireshark 0.9.10
wireshark wireshark 0.9.14
wireshark wireshark 0.99
wireshark wireshark 0.99.0
wireshark wireshark 0.99.1
wireshark wireshark 0.99.2
wireshark wireshark 0.99.3
wireshark wireshark 0.99.4
wireshark wireshark 0.99.5
wireshark wireshark 0.99.6
wireshark wireshark 0.99.6a
wireshark wireshark 0.99.7
wireshark wireshark 0.99.8
wireshark wireshark 0.99.9
wireshark wireshark 1.0
wireshark wireshark 1.0.0
wireshark wireshark 1.0.1
wireshark wireshark 1.0.2
wireshark wireshark 1.0.3
wireshark wireshark 1.0.4
wireshark wireshark 1.0.5
wireshark wireshark 1.0.6
wireshark wireshark 1.0.7
wireshark wireshark 1.0.8
wireshark wireshark 1.0.9
wireshark wireshark 1.2
wireshark wireshark 1.2.0
wireshark wireshark 1.2.1
wireshark wireshark 1.2.2
wireshark wireshark 1.2.3
wireshark wireshark 1.2.4


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD509BD0-3E90-47E5-97DA-F8814002EDF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E8E63FC-A3AA-455E-8AA7-E3577468F022",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DFC6BB8-5A74-4F6A-AFC8-959623D4236F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B432986-F5AE-4506-B584-3B4E943A9C04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "60178790-62CC-41A9-8B5A-78CF49069E0B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "41535173-00D3-4E52-9441-D7ED44BE9B05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "3017F8E8-F28D-46E0-A256-0121BAD588A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*",
              "matchCriteriaId": "503E7F73-0E2A-442C-9B76-679A2AD03052",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDF374E8-36A3-43AA-B86C-092F5B244841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3C422E5-3252-48C2-B4FF-E32AA5463D97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "31C43A78-E578-4B1C-8E33-24529E973E30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0D56DA6-3EB2-4074-8C43-A5FD93B1555B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1074B30-F2E6-47CD-8491-29163811E07F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "10FAAC5E-DD4E-49EF-A051-2F80BACC20D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB52B779-7A2D-43E0-9F12-C65053002EBC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A85B028-7384-403A-817C-B5001F02A8A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2F7D104-7498-4C5F-AE75-6F04D5DA35B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "801B1795-3DC4-4BE3-A693-37B6BD116B14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA611B86-AB5C-4CA1-9620-6F5532F4C819",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "17808311-AC2A-428A-BB8B-B08549C5DAEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "978C483C-A6F7-456F-9488-833D520D4A1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BB94CE6-03D3-43C3-B765-AC36961CD83C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "37FADA30-FD98-42F3-80F1-E8794C77AC76",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "90E01A6A-D948-4701-9C4E-F8C3FCC52F2C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA3F8A55-10DE-4197-9F9D-5F6570A94860",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0F1728E-ED97-4203-90D1-9E81E96BD7AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5629542-FD8E-4C7B-B396-BC76FB462083",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC077D96-1BBB-4F69-8C3A-F36CE3F3C668",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "26CB9265-B7A4-4EB4-9C20-F747F3786C9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C13C7D5-D344-45D2-9FF0-2C3388C94584",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D79DA61-F97C-4DCB-A2B7-FE67C5F10964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "84D6DFA0-53A2-424C-A31C-88FD683E5674",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap."
    },
    {
      "lang": "es",
      "value": "El analizador (1) SMB y (2) SMB2 en Wireshark v0.9.0 hasta v1.2.4 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) mediante un paquete modificado, como se ha demostrado por fuzz-2009-12-07-11141.pcap."
    }
  ],
  "id": "CVE-2009-4377",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-12-21T21:30:00.297",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/61178"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/37842"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/37916"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2009/dsa-1983"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:031"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/37407"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1023374"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/3596"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2009-09.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/61178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/37842"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/37916"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2009/dsa-1983"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:031"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/37407"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1023374"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/3596"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.wireshark.org/security/wnpa-sec-2009-09.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.