CVE-2008-3145 in Wireshark
Summary
The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.
Reservation
07/10/2008
Disclosure
07/16/2008
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3784 | Wireshark Packet Assembler input validation | 20 | Proof-of-Concept | Official fix | CVE-2008-3145 |