CVE:CVE-2010-1455
CNNVD:CNNVD-201005-149
Wireshark是一款非常流行的网络协议分析工具,以前名为Ethereal。
Wireshark的DOCSIS协议解析模块存在拒绝服务漏洞，用户辅助的远程攻击者可以通过畸形包跟踪文件引发拒绝服务(应用程序崩溃)。
solution:Upgrade ethereal_group ethereal to a higher version than 0.9.6,0.9.7,0.9.8,0.99.0,and avoid the version 0.9.6,0.9.7,0.9.8,0.99.0; Upgrade wireshark wireshark to a higher version than 0.9.6,0.99.0,0.99.1,0.99.2,0.99.3,0.99.4,0.99.5,0.99.6,0.99.7,0.99.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,and avoid the version 0.9.6,0.99.0,0.99.1,0.99.2,0.99.3,0.99.4,0.99.5,0.99.6,0.99.7,0.99.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7