Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1561 to the following vulnerability: Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors. NOTE: Vector 2 might also lead to a hang. Refences: http://www.wireshark.org/security/wnpa-sec-2008-02.html http://www.securityfocus.com/bid/28485 http://www.frsirt.com/english/advisories/2008/1007/references http://secunia.com/advisories/29569
wireshark-1.0.0-1.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.
wireshark-1.0.0-1.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
I don't see comments on RHEL versions here. Latest RHEL 4 version in RHN is wireshark-0.99.7-1.el4.i386. Does this affect versions shipped with RHEL 4 & 5? Same question for related bug #440015 and bug #439943
Due to a low impact of the flaw, fixing of this issue has been deferred until there is some more important issue to be addressed in the wireshark packages in Red Hat Enterprise Linux: Official statement is available at: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1561 Official Statement from Red Hat (4/1/2008) Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1561 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.
This issue was addressed in: Red Hat Enterprise Linux: http://rhn.redhat.com/errata/RHSA-2008-0890.html Fedora: https://admin.fedoraproject.org/updates/F8/FEDORA-2008-3040