Bug 440014 (CVE-2008-1561)
Summary: | CVE-2008-1561 wireshark: crash in X.509sat and Roofnet dissectors | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Tomas Hoger <thoger> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | cwebster, kreilly, rvokal |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1561 | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-10-01 18:04:24 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 435485, 435487, 435488, 461566, 461567, 461568, 461569, 461570, 833989 | ||
Bug Blocks: |
Description
Tomas Hoger
2008-04-01 11:55:38 UTC
wireshark-1.0.0-1.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report. wireshark-1.0.0-1.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. I don't see comments on RHEL versions here. Latest RHEL 4 version in RHN is wireshark-0.99.7-1.el4.i386. Does this affect versions shipped with RHEL 4 & 5? Same question for related bug #440015 and bug #439943 Due to a low impact of the flaw, fixing of this issue has been deferred until there is some more important issue to be addressed in the wireshark packages in Red Hat Enterprise Linux: Official statement is available at: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1561 Official Statement from Red Hat (4/1/2008) Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1561 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. This issue was addressed in: Red Hat Enterprise Linux: http://rhn.redhat.com/errata/RHSA-2008-0890.html Fedora: https://admin.fedoraproject.org/updates/F8/FEDORA-2008-3040 |