CVE-2010-1455

Published: May 12, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.

Affected (35)

Products: Ethereal Group: Ethereal · Wireshark: Wireshark

1 product

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Ethereal Group Ethereal	Version 0.9.6
Ethereal Group Ethereal	Version 0.9.7
Ethereal Group Ethereal	Version 0.9.8
Ethereal Group Ethereal	Version 0.99.0
Wireshark Wireshark	Version 0.9.6
Wireshark Wireshark	Version 0.99.0
Wireshark Wireshark	Version 0.99.1
Wireshark Wireshark	Version 0.99.2
Wireshark Wireshark	Version 0.99.3
Wireshark Wireshark	Version 0.99.4
Wireshark Wireshark	Version 0.99.5
Wireshark Wireshark	Version 0.99.6
Wireshark Wireshark	Version 0.99.7
Wireshark Wireshark	Version 0.99.8
Wireshark Wireshark	Version 1.0.0
Wireshark Wireshark	Version 1.0.10
Wireshark Wireshark	Version 1.0.11
Wireshark Wireshark	Version 1.0.12
Wireshark Wireshark	Version 1.0.1
Wireshark Wireshark	Version 1.0.2
Wireshark Wireshark	Version 1.0.3
Wireshark Wireshark	Version 1.0.4
Wireshark Wireshark	Version 1.0.5
Wireshark Wireshark	Version 1.0.6
Wireshark Wireshark	Version 1.0.7
Wireshark Wireshark	Version 1.0.8
Wireshark Wireshark	Version 1.0.9

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.2.0
Wireshark Wireshark	Version 1.2.1
Wireshark Wireshark	Version 1.2.2
Wireshark Wireshark	Version 1.2.3
Wireshark Wireshark	Version 1.2.4
Wireshark Wireshark	Version 1.2.5
Wireshark Wireshark	Version 1.2.6
Wireshark Wireshark	Version 1.2.7

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: secalert@redhat.com

http://secunia.com/advisories/39661

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42877

Source: secalert@redhat.com

http://secunia.com/advisories/43068

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:099

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/05/07/7

Source: secalert@redhat.com

http://www.osvdb.org/64363

Source: secalert@redhat.com

http://www.securityfocus.com/bid/39950

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1081

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2011/0076

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0212

Source: secalert@redhat.com

http://www.wireshark.org/security/wnpa-sec-2010-03.html

Source: secalert@redhat.com

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2010-04.html

Source: secalert@redhat.com

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4644

Source: secalert@redhat.com

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4646

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/58362

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7331

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39661

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42877

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:099

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/05/07/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/64363

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/39950

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1081

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2011/0076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2010-03.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.wireshark.org/security/wnpa-sec-2010-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4644

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4646

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/58362

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7331

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.