Oval Definition:oval:org.opensuse.security:def:20094376
Revision Date:2022-05-20Version:1
Title:CVE-2009-4376
Description:

Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2009-4376
Mitre CVE-2009-4376
SUSE CVE-2009-4376
SUSE-SR:2010:007
SUSE-SR:2010:007
Platform(s):Open Enterprise Server
openSUSE 11.0
openSUSE 11.1
openSUSE 11.2
SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP3 for x86
SUSE Linux Enterprise Desktop 11 GA
SUSE Linux Enterprise SDK 10 SP2
SUSE Linux Enterprise SDK 10 SP3
SUSE Linux Enterprise SDK 11 GA
SUSE Linux Enterprise Server 10 SP3
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 GA
SUSE Linux Enterprise Server for SAP 10 SP2
SUSE Linux Enterprise Server for SAP 10 SP3
SUSE Linux Enterprise Server for SAP Applications 11
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 11 is installed
  • AND wireshark-1.0.5-1.34 is installed
  • Definition Synopsis
  • Release Information
  • sles10-sp3 is installed
  • ethereal-devel less than 0.10.14-16.41.1
  • OR ethereal less than 0.10.14-16.41.1
  • OR
  • sles10-sp3-sdk is installed
  • AND ethereal-devel less than 0.10.14-16.41.1
  • OR Package Information
  • sles10-sp2-sap is installed
  • ethereal-devel less than 0.10.14-16.40.3
  • OR ethereal less than 0.10.14-16.40.3
  • OR
  • sles10-sp2-sdk is installed
  • AND ethereal-devel less than 0.10.14-16.40.3
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 is installed
  • AND wireshark-1.0.5-1.34.1 is installed
  • BACK