(Oracle Issues Fix for Solaris) Wireshark IKE Packet Processing Error Lets Remote Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1026383

SecurityTracker URL: http://securitytracker.com/id/1026383

CVE Reference: CVE-2011-3266 (Links to External Site)

Date: Dec 7 2011

Impact: Denial of service via network

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 1.4.0 to 1.4.8, 1.6.0 to 1.6.1

Description: A vulnerability was reported in Wireshark. A remote user can cause denial of service conditions.

A remote user can send a specially crafted IKE packet to cause the IKEv1 dissector to enter an infinite loop.

The vulnerability resides in the proto_tree_add_item() function in 'tshark.c'.

The penetration test team Of NCNIPC (China) reported this vulnerability.

Impact: A remote user can cause Wireshark to enter an infinite loop.

Solution: Oracle has issued a fix for Solaris.

The Oracle advisory is available at:

http://blogs.oracle.com/sunsecurity/entry/denial_of_service_vulnerability_in1

Vendor URL: www.wireshark.org/ (Links to External Site)

Cause: State error

Underlying OS: UNIX (Solaris - SunOS)

Message History: This archive entry is a follow-up to the message listed below.

Date: Wed, 07 Dec 2011 04:39:34 +0000
Subject: http://blogs.oracle.com/sunsecurity/entry/denial_of_service_vulnerability_in1


CVE-2011-3266