CVE-2009-3241: High severity wireshark vulnerability

Published Sep 18, 2009

Updated

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

Affected Software

18 affected components

Wireshark Wireshark=0.99.9

Wireshark Wireshark=0.99.8

Wireshark Wireshark=1.0.1

Wireshark Wireshark=1.2.0

Wireshark Wireshark=1.0

Wireshark Wireshark=0.99.6

Wireshark Wireshark=1.0.2

Wireshark Wireshark=1.0.4

Wireshark Wireshark=1.0.3

Wireshark Wireshark=1.0.6

Wireshark Wireshark=1.2.1

Wireshark Wireshark=1.0.8

Wireshark Wireshark=1.0.5

Wireshark Wireshark=1.2

Wireshark Wireshark=1.0.0

Wireshark Wireshark=0.99.6a

Wireshark Wireshark=0.99.7

Wireshark Wireshark=1.0.7

Remediation

Patch Available

http://www.wireshark.org/security/wnpa-sec-2009-05.html

Event History

Sep 18, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3241?

CVE-2009-3241 has a severity rating that indicates it can cause a denial of service through excessive memory and CPU consumption.

How do I fix CVE-2009-3241?

To fix CVE-2009-3241, users should upgrade to a patched version of Wireshark that is not affected by this vulnerability.

What versions of Wireshark are affected by CVE-2009-3241?

CVE-2009-3241 affects Wireshark versions from 0.99.6 to 1.2.1.

What kind of attack does CVE-2009-3241 exploit?

CVE-2009-3241 exploits vulnerabilities in processing malformed OPCUA Service CallRequest packets.

Can CVE-2009-3241 be triggered remotely?

Yes, CVE-2009-3241 can be triggered remotely by an attacker sending crafted packets to the Wireshark application.