CVE-2009-3241

Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.

Published Bycve@mitre.org

Published DateSep 18, 2009, 10:30

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

7.8

Vector String

AV:N/AC:L/Au:N/C:N/I:N/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

COMPLETE

References

http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
http://secunia.com/advisories/36754
http://secunia.com/advisories/37409
http://secunia.com/advisories/37477
http://www.debian.org/security/2009/dsa-1942
http://www.securityfocus.com/bid/36408
http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html
http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html
http://www.wireshark.org/security/wnpa-sec-2009-05.html
http://www.wireshark.org/security/wnpa-sec-2009-06.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

7.8

Vector String

AV:N/AC:L/Au:N/C:N/I:N/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

COMPLETE