CVE-2012-0043

Upstream information

CVE-2012-0043 at MITRE

Description

Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a series of fragmented RLC packets.

---

SUSE information

CVSS v2 Scores

	National Vulnerability Database
Base Score	5.82
Vector	AV:A/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Adjacent Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 741188 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2012:0296-1, published Thu Feb 23 15:08:25 MST 2012
• SUSE-SU-2012:0296-2, published Sun Feb 26 17:08:33 MST 2012
• openSUSE-SU-2012:0295-1, published Thu, 23 Feb 2012 19:08:33 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Server 11 SP1	wireshark >= 1.4.11-0.2.2.1	Patchnames: slessp1-wireshark
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP4 for x86	wireshark >= 1.4.11-0.5.1	sle10-sp4-sdk.x86 sles10-sp4.ppc ZYPP Patch Nr: 7943
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries SLE SDK 10 SP4 for IBM zSeries SLE SDK 10 SP4 for IPF SLE SDK 10 SP4 for X86-64 SLE SDK 10 SP4 for x86	wireshark-devel >= 1.4.11-0.5.1	sle10-sp4-sdk.x86 sles10-sp4.ppc ZYPP Patch Nr: 7943
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP4 for IBM POWER SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit SUSE Linux Enterprise Server 10 SP4 for IPF SUSE Linux Enterprise Server 10 SP4 for x86	wireshark >= 1.4.11-0.5.1 wireshark-devel >= 1.4.11-0.5.1	sle10-sp4-sdk.x86 sles10-sp4.ppc ZYPP Patch Nr: 7943
SUSE Linux Enterprise Software Development Kit 11 SP1	wireshark >= 1.4.11-0.2.2.1 wireshark-devel >= 1.4.11-0.2.2.1	sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86-64 sles11-sp1.s390x sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.ia64 sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.ppc sles11-sp1.ppc SAT Patch Nr: 5741
SUSE Linux Enterprise Software Development Kit 11 SP1	wireshark-devel >= 1.4.11-0.2.2.1	sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86-64 sles11-sp1.s390x sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.ia64 sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.ppc sles11-sp1.ppc SAT Patch Nr: 5741
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware	wireshark >= 1.4.11-0.2.2.1	sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86-64 sles11-sp1.s390x sled11-sp1.x86 sles11-sp1-vmware.x86 sles11-sp1.ia64 sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.ppc sles11-sp1.ppc SAT Patch Nr: 5741
openSUSE 11.4	wireshark >= 1.4.11-0.2.3 wireshark-devel >= 1.4.11-0.2.3
openSUSE 11.4	wireshark >= 1.4.11-0.2.3 wireshark-debuginfo >= 1.4.11-0.2.3 wireshark-debugsource >= 1.4.11-0.2.3 wireshark-devel >= 1.4.11-0.2.3	Patchnames: wireshark