Wireshark contains a flaw that may allow a remote denial of service. The issue is triggered when the ASN.1 BER dissector suffers from an assertation failure, allowing a remote attacker to cause a denial of service via crafted packets.

Upgrade to version 1.4.3 or higher, as they have been reported to fix this vulnerability. It is also possible to temporarily work around the flaw by implementing the following workaround:

Disable the ENTTEC and MAC-LTE dissectors (there is no workaround for the BER issue):

* Select Analyze→Enabled Protocols... from the menu.
* Make sure "ENTTEC" and "MAC-LTE" are un-checked.
* Click "Save", then click "OK".

• CVE ID: 2011-0445 (see also: NVD)
• Secunia Advisory ID: 43175 44018 46343
• VUPEN Advisory: ADV-2011-0079
• Vendor Specific News/Changelog Entry: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053650.html
  http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053669.html
  http://security.gentoo.org/glsa/glsa-201110-02.xml
  http://www.wireshark.org/security/wnpa-sec-2011-02.html
  https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5537
• Mail List Post: http://seclists.org/fulldisclosure/2011/Oct/412
• Vendor Specific Advisory URL: https://hermes.opensuse.org/messages/7850661

• Not Available