Red Hat Security AdvisoryRHSA-2006:0602
wireshark security update (was ethereal)
Released 2006-08-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wireshark-0.99.2-EL3.1, wireshark-0.99.2-EL3.1.i386, wireshark-gnome-0.99.2-EL3.1 +1
- Red Hat Enterprise Linux AS version 3 wireshark-0.99.2-EL3.1, wireshark-0.99.2-EL3.1.i386, wireshark-0.99.2-EL3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 wireshark-0.99.2-EL4.1, wireshark-0.99.2-EL4.1.i386, wireshark-0.99.2-EL4.1.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 wireshark-0.99.2-EL4.1, wireshark-0.99.2-EL4.1.i386, wireshark-gnome-0.99.2-EL4.1 +1
- Red Hat Enterprise Linux ES version 3 wireshark-0.99.2-EL3.1, wireshark-0.99.2-EL3.1.i386, wireshark-0.99.2-EL3.1.ia64 +3
- Red Hat Enterprise Linux ES version 4 wireshark-0.99.2-EL4.1, wireshark-0.99.2-EL4.1.i386, wireshark-0.99.2-EL4.1.ia64 +3
- Red Hat Enterprise Linux WS version 3 wireshark-0.99.2-EL3.1, wireshark-0.99.2-EL3.1.i386, wireshark-0.99.2-EL3.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 wireshark-0.99.2-EL4.1, wireshark-0.99.2-EL4.1.i386, wireshark-0.99.2-EL4.1.ia64 +3
Fixes 6 records
Priority MEDIUM 53
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07466 · Published 2006-07-18 · Fixed CWE-119
Priority MEDIUM 52
Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) M…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06041 · Published 2006-07-18 · Fixed CWE-134
Priority MEDIUM 40
Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03001 · Published 2006-07-18 · Fixed
Priority LOW 37
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01942 · Published 2006-07-18 · Fixed CWE-189
Priority LOW 29
Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03327 · Published 2006-07-18 · Fixed CWE-399
Priority LOW 27
Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02297 · Published 2006-07-18 · Fixed CWE-399
THREATIST.IORead the docs