Nico Golde wrote:

I'll package 0.99.7pre1, I'll then investigate the problems also
present in Etch/Sarge packages.

> Beyond Security discovered that Wireshark could loop excessively
> while reading a malformed DNP packet. 
> Versions affected: 0.10.12 to 0.99.6 

Etch.


> Stefan Esser discovered a buffer overflow in the SSL dissector. 
> Versions affected: 0.99.0 to 0.99.6 

Etch.

> The HTTP dissector could crash on some systems while decoding chunked 
> messages. 
> Versions affected: 0.10.14 to 0.99.6 

Etch.


> The MEGACO dissector could enter a large loop and consume system resources. 
> Versions affected: 0.9.14 to 0.99.6 

Etch and Sarge.

> Fabiodds discovered a buffer overflow in the iSeries (OS/400)
> Communication trace file parser. (Bug 1926) 
> Versions affected: 0.99.0 to 0.99.6 

Etch.


> The Bluetooth SDP dissector could go into an infinite loop. 
> Versions affected: 0.99.2 to 0.99.6 

Etch.

> A malformed RPC Portmap packet could cause a crash. (Bug 1998) 
> Versions affected: 0.8.16 to 0.99.6

Etch and Sarge.


Regards,

        Frederic



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to