CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

• http://secunia.com/advisories/37175Vendor Advisory
• http://secunia.com/advisories/37409
• http://secunia.com/advisories/37477
• http://www.debian.org/security/2009/dsa-1942
• http://www.securityfocus.com/bid/36846
• http://www.vupen.com/english/advisories/2009/3061Patch, Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.htmlPatch, Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.htmlPatch, Vendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-07.htmlVendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-08.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54017
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005
• http://secunia.com/advisories/37175Vendor Advisory
• http://secunia.com/advisories/37409
• http://secunia.com/advisories/37477
• http://www.debian.org/security/2009/dsa-1942
• http://www.securityfocus.com/bid/36846
• http://www.vupen.com/english/advisories/2009/3061Patch, Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.htmlPatch, Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.htmlPatch, Vendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-07.htmlVendor Advisory
• http://www.wireshark.org/security/wnpa-sec-2009-08.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54017
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005

Published

Oct 30, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3544Xerver HTTP Server 4.32 allows remote attackers to obtain th…
• CVE-2009-3545DataWizard Technologies FtpXQ FTP Server 3.0 allows remote a…
• CVE-2009-3546The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x…
• CVE-2009-3547Multiple race conditions in fs/pipe.c in the Linux kernel be…7
• CVE-2009-3548The Windows installer for Apache Tomcat 6.0.0 through 6.0.20…
• CVE-2009-3549packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0…
• CVE-2009-3551Off-by-one error in the dissect_negprot_response function in…
• CVE-2009-3552In RHEV-M VDC 2.2.0, it was found that the SSL certificate w…3.1
• CVE-2009-3553Use-after-free vulnerability in the abstract file-descriptor…7.5
• CVE-2009-3554Twiddle in Red Hat JBoss Enterprise Application Platform (ak…
• CVE-2009-3555The TLS protocol, and the SSL protocol 3.0 and possibly earl…9.8
• CVE-2009-3556A certain Red Hat configuration step for the qla2xxx driver …