Vulnerability CVE-2009-3549

Vulnerability Name:

CVE-2009-3549 (CCN-54016)

Assigned:

2009-10-26

Published:

2009-10-26

Updated:

2017-09-19

Summary:

packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2009-3549

Source: CCN
Type: SA37175
Wireshark Denial of Service Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
37175

Source: SECUNIA
Type: UNKNOWN
37409

Source: CCN
Type: GLSA-200911-05
Wireshark: Multiple vulnerabilities

Source: CCN
Type: OSVDB ID: 59459
Wireshark Paltalk Dissector Unspecified DoS

Source: BID
Type: Patch
36846

Source: CCN
Type: BID-36846
Wireshark 1.2.2 and 1.0.9 Multiple Vulnerabilities

Source: VUPEN
Type: Patch, Vendor Advisory
ADV-2009-3061

Source: CONFIRM
Type: Patch
http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html

Source: CCN
Type: wnpa-sec-2009-07
Multiple vulnerabilities in Wireshark® version 0.10.10 to 1.2.2

Source: CONFIRM
Type: Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2009-07.html

Source: CONFIRM
Type: UNKNOWN
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689

Source: XF
Type: UNKNOWN
wireshark-dissectpaltalk-dos(54016)

Source: XF
Type: UNKNOWN
wireshark-dissectpaltalk-dos(54016)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6391

Source: SUSE
Type: SUSE-SR:2009:020
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:wireshark:wireshark:1.2:*:*:*:*:*:*:*

OR cpe:/a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*

OR cpe:/a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*

AND

cpe:/h:sun:sparc:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*

OR cpe:/a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20093549	V	CVE-2009-3549	2022-05-20
oval:org.opensuse.security:def:31335	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:32242	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-12-14
oval:org.opensuse.security:def:32237	P	Security update for glib-networking (Important)	2021-12-13
oval:org.opensuse.security:def:26182	P	Security update for MozillaFirefox (Important)	2021-12-12
oval:org.opensuse.security:def:31320	P	Security update for MozillaFirefox (Important)	2021-12-12
oval:org.opensuse.security:def:42248	P	Security update for the Linux RT Kernel (Important)	2021-12-09
oval:org.opensuse.security:def:31308	P	Security update for postgresql96 (Important)	2021-11-22
oval:org.opensuse.security:def:31309	P	Security update for postgresql10 (Important)	2021-11-22
oval:org.opensuse.security:def:26167	P	Security update for php72 (Moderate)	2021-11-19
oval:org.opensuse.security:def:26156	P	Security update for open-lldp (Moderate)	2021-10-26
oval:org.opensuse.security:def:33019	P	Security update for apache2 (Important)	2021-10-06
oval:org.opensuse.security:def:26141	P	Security update for webkit2gtk3 (Important)	2021-10-06
oval:org.opensuse.security:def:32188	P	Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)	2021-09-23
oval:org.opensuse.security:def:26130	P	Security update for ghostscript (Critical)	2021-09-21
oval:org.opensuse.security:def:26129	P	Security update for gtk-vnc (Moderate)	2021-09-16
oval:org.opensuse.security:def:26123	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:31675	P	Security update for bind (Moderate)	2021-08-30
oval:org.opensuse.security:def:26109	P	Security update for unrar (Moderate)	2021-08-25
oval:org.opensuse.security:def:32980	P	Security update for spice-vdagent (Moderate)	2021-08-17
oval:org.opensuse.security:def:32155	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-07-27
oval:org.opensuse.security:def:32132	P	Security update for libnettle (Important)	2021-06-23
oval:org.opensuse.security:def:32128	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:31203	P	Security update for apache2 (Important)	2021-06-17
oval:org.opensuse.security:def:36322	P	wireshark-1.10.13-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36580	P	wireshark-1.10.13-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42729	P	wireshark-1.10.13-0.2.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:26070	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:31618	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:32084	P	Security update for gdm (Important)	2021-04-28
oval:org.opensuse.security:def:31608	P	Security update for xen (Important)	2021-04-19
oval:org.opensuse.security:def:32062	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:42056	P	Security update for curl (Moderate)	2021-04-01
oval:org.opensuse.security:def:26213	P	Security update for evolution-data-server (Moderate)	2021-03-19
oval:org.opensuse.security:def:32276	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:31740	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:26205	P	Security update for openssl-1_0_0 (Moderate)	2021-03-08
oval:org.opensuse.security:def:31727	P	Security update for wpa_supplicant (Important)	2021-02-15
oval:org.opensuse.security:def:26075	P	Security update for ImageMagick (Important)	2021-01-22
oval:org.opensuse.security:def:26031	P	Security update for php74 (Moderate)	2021-01-14
oval:org.opensuse.security:def:32098	P	Security update for dovecot22 (Important)	2021-01-04
oval:org.opensuse.security:def:25976	P	Security update for curl (Moderate)	2020-12-10
oval:org.opensuse.security:def:32006	P	Security update for mutt (Important)	2020-12-07
oval:org.opensuse.security:def:36056	P	wireshark-1.8.6-0.2.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42463	P	wireshark-1.8.6-0.2.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35649	P	wireshark-1.0.5-1.34.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35841	P	wireshark-1.4.10-0.2.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:25403	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26501	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:25872	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:26337	P	Security update for freexl (Low)	2020-12-01
oval:org.opensuse.security:def:31117	P	Security update for krb5 (Important)	2020-12-01
oval:org.opensuse.security:def:25595	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:31976	P	Security update for jasper (Moderate)	2020-12-01
oval:org.opensuse.security:def:26847	P	yast2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26649	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25947	P	Security update for freerdp (Important)	2020-12-01
oval:org.opensuse.security:def:25626	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:32023	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:27019	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31129	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:25733	P	Security update for mgetty (Moderate)	2020-12-01
oval:org.opensuse.security:def:26905	P	glibc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31523	P	Security update for rsync (Moderate)	2020-12-01
oval:org.opensuse.security:def:25830	P	Security update for libimobiledevice, usbmuxd (Important)	2020-12-01
oval:org.opensuse.security:def:25201	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:32542	P	kvm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27578	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25605	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:26555	P	glib2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32766	P	pcsc-ccid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25276	P	Security update for openssl-1_1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26284	P	Security update for taglib (Low)	2020-12-01
oval:org.opensuse.security:def:32608	P	systemtap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25617	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:31832	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:26759	P	libpng12-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25485	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:31918	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:26603	P	libsnmp15-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33285	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25809	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31871	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:26840	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25817	P	Security update for pidgin-otr (Important)	2020-12-01
oval:org.opensuse.security:def:27285	P	rsync on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32454	P	Security update for xorg-x11-libICE (Moderate)	2020-12-01
oval:org.opensuse.security:def:31937	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:31789	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:26414	P	Security update for python-Django (Moderate)	2020-12-01
oval:org.opensuse.security:def:26021	P	Security update for libreoffice (Moderate)	2020-12-01
oval:org.opensuse.security:def:32298	P	Security update for puppet (Moderate)	2020-12-01
oval:org.opensuse.security:def:25392	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:31526	P	Security update for rsyslog (Moderate)	2020-12-01
oval:org.opensuse.security:def:26448	P	Security update for phpMyAdmin (Important)	2020-12-01
oval:org.opensuse.security:def:25932	P	Security update for gstreamer-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:32614	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25871	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:31874	P	Security update for cyrus-imapd (Important)	2020-12-01
oval:org.opensuse.security:def:31571	P	Security update for strongswan (Moderate)	2020-12-01
oval:org.opensuse.security:def:26323	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:25467	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:31889	P	Security update for evince (Important)	2020-12-01
oval:org.opensuse.security:def:26550	P	fuse on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26614	P	mozilla-xulrunner190 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25883	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31783	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26381	P	Security update for ffmpeg (Moderate)	2020-12-01
oval:org.opensuse.security:def:31118	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25676	P	Security update for postgresql, postgresql96, postgresql10 and postgresql12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26861	P	ant on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31522	P	Security update for rsync (Moderate)	2020-12-01
oval:org.opensuse.security:def:25777	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:27054	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25200	P	Security update for java-1_8_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32503	P	e2fsprogs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27543	P	python-crypto on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31534	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:26471	P	Security update for Mozilla Thunderbird (Moderate)	2020-12-01
oval:org.opensuse.security:def:25879	P	Security update for pidgin-otr (Important)	2020-12-01
oval:org.opensuse.security:def:25212	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:31427	P	Security update for php53 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26235	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:32564	P	libpython2_6-1_0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25606	P	Security update for libjpeg-turbo (Moderate)	2020-12-01
oval:org.opensuse.security:def:26706	P	ghostscript-fonts-other on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32805	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25404	P	Security update for spice (Moderate)	2020-12-01
oval:org.opensuse.security:def:31762	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26589	P	libltdl7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33246	P	pyxml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25681	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:26808	P	postgresql on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26805	P	perl-Tk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25542	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:31974	P	Security update for jasper (Moderate)	2020-12-01
oval:org.opensuse.security:def:26647	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25890	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32398	P	Security update for unzip (Moderate)	2020-12-01
oval:org.opensuse.security:def:31893	P	Security update for expat (Moderate)	2020-12-01
oval:org.opensuse.security:def:31788	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26333	P	Security update for redis (Moderate)	2020-12-01
oval:org.opensuse.security:def:25968	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:27320	P	wireshark on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25391	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:31394	P	Security update for patch (Important)	2020-12-01
oval:org.opensuse.security:def:26297	P	Security update for libvpx (Moderate)	2020-12-01
oval:org.opensuse.security:def:25918	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32575	P	log4net on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31800	P	Security update for SuSEfirewall2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31484	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:32342	P	Security update for spice (Important)	2020-12-01
oval:org.mitre.oval:def:6391	V	Wireshark Denial of Service vulnerability caused by packet-paltalk.c in the Paltalk dissector	2013-08-19

BACK