p PatchFirst

CVE-2009-4377

CVE-2009-4377

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.

EPSS 2.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • wireshark Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.5-1

    Update to 1.2.5-1

  • wireshark Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.5-1

    Update to 1.2.5-1

  • wireshark Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.5-1

    Update to 1.2.5-1

Original sources

Check your server →