CVE-2008-1562

MEDIUM 5.0CVE-2008-1562 · Published 31/03/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
wireshark wireshark	`= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.7= 0.99.8`	No fix yet

Description

The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.

References

lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
secunia.com/advisories/29569 · Vendor Advisory
secunia.com/advisories/29622
secunia.com/advisories/29695
secunia.com/advisories/29736
secunia.com/advisories/29971
secunia.com/advisories/32091
support.avaya.com/elmodocs2/security/ASA-2008-392.htm
wiki.rpath.com/wiki/Advisories:rPSA-2008-0138
gentoo.org/security/en/glsa/glsa-200805-05.xml
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2008-0890.html
securityfocus.com/archive/1/490487/100/0/threaded
securityfocus.com/bid/28485
securitytracker.com/id
vupen.com/english/advisories/2008/1007/references
vupen.com/english/advisories/2008/2773
wireshark.org/security/wnpa-sec-2008-02.html
exchange.xforce.ibmcloud.com/vulnerabilities/41516
issues.rpath.com/browse/RPL-2418
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14549
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9318
redhat.com/archives/fedora-package-announce/2008-April/msg00140.html
redhat.com/archives/fedora-package-announce/2008-April/msg00228.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free