| Package | Affected versions | Patched versions |
|---|---|---|
| wireshark | = 0.8.19= 0.99.0= 0.99.1= 0.99.2= 0.99.3= 0.99.4= 0.99.5= 0.99.6= 0.99.6a= 0.99.7= 0.99.8= 1.0= 1.0.0= 1.0.1 |
The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free