Wireshark contains a flaw that may allow a remote denial of service. The issue is triggered when the ZigBee ZCL Discover Attribute Response Dissector is made to enter an infinite loop, and will result in loss of availability for the service.

Upgrade to version 1.4.2 or 1.2.13 or higher, as they have been reported to fix this vulnerability. It is also possible to temporarily work around the flaw by implementing the following workaround:
Disable the LDSS and ZigBee ZCL dissectors:
* Select Analyze→Enabled Protocols... from the menu.
* Make sure "LDSS" and "ZigBee ZCL" are un-checked.
* Click "Save", then click "OK".

• CVE ID: 2010-4301 (see also: NVD)
• Secunia Advisory ID: 42290 42877 43068 44018 46343
• Related OSVDB ID: 69354
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
  http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
  http://security.gentoo.org/glsa/glsa-201110-02.xml
• Mail List Post: http://seclists.org/fulldisclosure/2011/Oct/412
• Vendor URL: http://www.wireshark.org/
• Vendor Specific Advisory URL: http://www.wireshark.org/security/wnpa-sec-2010-14.html
  https://hermes.opensuse.org/messages/7850661

• Not Available