Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ethereal | Ethereal_group | * | 0.9.7 (including) |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Linux 7.2 | RedHat | * | |
| Red Hat Linux 7.3 | RedHat | * | |
| Red Hat Linux 8.0 | RedHat | * | |
| Red Hat Linux Advanced Workstation 2.1 | RedHat | * |
References
- http://www.ethereal.com/appnotes/enpa-sa-00007.html
- http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68\u0026r2=1.69
- http://www.redhat.com/support/errata/RHSA-2002-290.html
- http://www.ethereal.com/appnotes/enpa-sa-00007.html
- http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68\u0026r2=1.69
- http://www.redhat.com/support/errata/RHSA-2002-290.html