CVE-2008-4685
Published: 22 October 2008
Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.
Priority
Status
Package | Release | Status |
---|---|---|
ethereal Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
gutsy |
Does not exist
|
|
hardy |
Does not exist
|
|
intrepid |
Does not exist
|
|
jaunty |
Does not exist
|
|
karmic |
Does not exist
|
|
upstream |
Needs triage
|
|
wireshark Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
gutsy |
Released
(0.99.6rel-3ubuntu0.4)
|
|
hardy |
Released
(1.0.0-1ubuntu0.2)
|
|
intrepid |
Released
(1.0.3-1ubuntu2.2)
|
|
jaunty |
Not vulnerable
(1.0.6-1ubuntu1)
|
|
karmic |
Not vulnerable
(1.0.6-1ubuntu1)
|
|
upstream |
Released
(1.0.4)
|