bugtraq - Re: Wireshark 1.4.0 Malformed IKE Packet Denial of Service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 13 Jul 2011 17:39:22 GMT
From: gerald@...eshark.org
To: bugtraq@...urityfocus.com
Subject: Re: Wireshark 1.4.0 Malformed IKE Packet Denial of Service

This appears to be a duplicate of bug 5374[1], originally reported by Alexander Koeppe. It was fixed in Wireshark 1.4.2, which was released on November 19, 2010. I can reproduce the problem here with Wireshark 1.4.0 and 1.4.1 but not Wireshark 1.4.2 or the current 1.4 code.

  [1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5374