SUSE-SR:2009:016Vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html CVE-2009-3241
Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)
Record summary
CVE-2009-3241 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)ExploitDB exploitby Buildbot BuilderNot analyzed1 file
References
Showing 12 of 1336754Third-party advisory
http://secunia.com/advisories/36754 37409Third-party advisory
http://secunia.com/advisories/37409 37477Third-party advisory
http://secunia.com/advisories/37477 DSA-1942Vendor advisory
http://www.debian.org/security/2009/dsa-1942 36408vdb entry
http://www.securityfocus.com/bid/36408 wireshark.orgConfirmation
http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html wireshark.orgConfirmation
http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html wireshark.orgConfirmation
http://www.wireshark.org/security/wnpa-sec-2009-05.html wireshark.orgConfirmation
http://www.wireshark.org/security/wnpa-sec-2009-06.html bugs.wireshark.org
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-3241