CVE-2009-2559

Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://secunia.com/advisories/35884Vendor Advisory
• http://www.securityfocus.com/bid/35748
• http://www.vupen.com/english/advisories/2009/1970Patch, Vendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-04.htmlPatch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379
• http://secunia.com/advisories/35884Vendor Advisory
• http://www.securityfocus.com/bid/35748
• http://www.vupen.com/english/advisories/2009/1970Patch, Vendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-04.htmlPatch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379

Published

Jul 21, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2553Multiple SQL injection vulnerabilities in comments.php in Su…
• CVE-2009-2554SQL injection vulnerability in the search method in jobline.…
• CVE-2009-2555Heap-based buffer overflow in src/jsregexp.cc in Google V8 b…
• CVE-2009-2556Google Chrome before 2.0.172.37 allows attackers to leverage…
• CVE-2009-2557Directory traversal vulnerability in system/download.php in …
• CVE-2009-2558system/message.php in Admin News Tools 2.5 does not properly…
• CVE-2009-2560Multiple unspecified vulnerabilities in Wireshark 1.2.0 allo…
• CVE-2009-2561Unspecified vulnerability in the sFlow dissector in Wireshar…
• CVE-2009-2562Unspecified vulnerability in the AFS dissector in Wireshark …
• CVE-2009-2563Unspecified vulnerability in the Infiniband dissector in Wir…
• CVE-2009-2564NOS Microsystems getPlus Download Manager, as used in Adobe …
• CVE-2009-2565Cross-site scripting (XSS) vulnerability in Perl CGI's By Mr…