CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.

🔗 References (64)

• secalert@redhathttp://bugs.gentoo.org/show_bug.cgi?id=199958
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
• secalert@redhathttp://secunia.com/advisories/27777
• secalert@redhathttp://secunia.com/advisories/28197
• secalert@redhathttp://secunia.com/advisories/28207
• secalert@redhathttp://secunia.com/advisories/28288
• secalert@redhathttp://secunia.com/advisories/28304
• secalert@redhathttp://secunia.com/advisories/28325
• secalert@redhathttp://secunia.com/advisories/28564
• secalert@redhathttp://secunia.com/advisories/28583
• secalert@redhathttp://secunia.com/advisories/29048
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200712-23.xml
• secalert@redhathttp://securityreason.com/securityalert/3095
• secalert@redhathttp://securitytracker.com/id?1018988
• secalert@redhathttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004