CVE Vulnerabilities

CVE-2009-2560

Published: Jul 21, 2009 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
2.9 LOW
AV:A/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW
root.io logo minimus.io logo echo.ai logo

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.

Affected Software

NameVendorStart VersionEnd Version
WiresharkWireshark1.0.0 (including)1.0.0 (including)
WiresharkWireshark1.0.1 (including)1.0.1 (including)
WiresharkWireshark1.0.2 (including)1.0.2 (including)
WiresharkWireshark1.0.3 (including)1.0.3 (including)
WiresharkWireshark1.0.4 (including)1.0.4 (including)
WiresharkWireshark1.0.5 (including)1.0.5 (including)
WiresharkWireshark1.0.6 (including)1.0.6 (including)
WiresharkWireshark1.0.7 (including)1.0.7 (including)
WiresharkWireshark1.0.8 (including)1.0.8 (including)
WiresharkWireshark1.0.9 (including)1.0.9 (including)
WiresharkWireshark1.2.0 (including)1.2.0 (including)
Red Hat Enterprise Linux 3RedHatwireshark-0:1.0.11-EL3.6*
Red Hat Enterprise Linux 4RedHatwireshark-0:1.0.11-1.el4_8.5*
Red Hat Enterprise Linux 5RedHatwireshark-0:1.0.11-1.el5_5.5*
EtherealUbuntudapper*
WiresharkUbuntuhardy*
WiresharkUbuntuintrepid*
WiresharkUbuntujaunty*
WiresharkUbuntukarmic*
WiresharkUbuntuupstream*

References