Red Hat Security Advisory

RHSA-2006:0658

wireshark security update

Released 2006-09-12 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Desktop version 3 wireshark-0.99.3-EL3.2, wireshark-0.99.3-EL3.2.i386, wireshark-gnome-0.99.3-EL3.2 +1
Red Hat Enterprise Linux AS version 3 wireshark-0.99.3-EL3.2, wireshark-0.99.3-EL3.2.i386, wireshark-0.99.3-EL3.2.ia64 +5
Red Hat Enterprise Linux AS version 4 wireshark-0.99.3-EL4.2, wireshark-0.99.3-EL4.2.i386, wireshark-0.99.3-EL4.2.ia64 +5
Red Hat Enterprise Linux Desktop version 4 wireshark-0.99.3-EL4.2, wireshark-0.99.3-EL4.2.i386, wireshark-gnome-0.99.3-EL4.2 +1
Red Hat Enterprise Linux ES version 3 wireshark-0.99.3-EL3.2, wireshark-0.99.3-EL3.2.i386, wireshark-0.99.3-EL3.2.ia64 +3
Red Hat Enterprise Linux ES version 4 wireshark-0.99.3-EL4.2, wireshark-0.99.3-EL4.2.i386, wireshark-0.99.3-EL4.2.ia64 +3
Red Hat Enterprise Linux WS version 3 wireshark-0.99.3-EL3.2, wireshark-0.99.3-EL3.2.i386, wireshark-0.99.3-EL3.2.ia64 +3
Red Hat Enterprise Linux WS version 4 wireshark-0.99.3-EL4.2, wireshark-0.99.3-EL4.2.i386, wireshark-0.99.3-EL4.2.ia64 +3

Fixes 3 records

TI-2006-04186 CVE-2006-4333 · GHSA-jhfx-pfvp-j6f3

The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote…

LOW 31

The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.04012 Published 2006-08-24 Fixed CWE-399

TI-2006-04184 CVE-2006-4331 · GHSA-8g49-gwpq-xm8f

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly…

LOW 30

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04471 Published 2006-08-24 Fixed

TI-2006-04183 CVE-2006-4330 · GHSA-4gjf-g4v6-75fp

Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2…

LOW 26

Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03611 Published 2006-08-24 Fixed