Red Hat Security AdvisoryRHSA-2009:0313
wireshark security update
Released 2009-03-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wireshark-1.0.6-EL3.3, wireshark-1.0.6-EL3.3.i386, wireshark-gnome-1.0.6-EL3.3 +1
- Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.6-2.el5_3, wireshark-1.0.6-2.el5_3.i386, wireshark-1.0.6-2.el5_3.ia64 +5
- Red Hat Enterprise Linux AS version 3 wireshark-1.0.6-EL3.3, wireshark-1.0.6-EL3.3.i386, wireshark-1.0.6-EL3.3.ia64 +5
- Red Hat Enterprise Linux AS version 4 wireshark-1.0.6-2.el4_7, wireshark-1.0.6-2.el4_7.i386, wireshark-1.0.6-2.el4_7.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.6-2.el5_3, wireshark-1.0.6-2.el5_3.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.6-2.el5_3, wireshark-gnome-1.0.6-2.el5_3, wireshark-gnome-1.0.6-2.el5_3.i386
- Red Hat Enterprise Linux Desktop version 4 wireshark-1.0.6-2.el4_7, wireshark-1.0.6-2.el4_7.i386, wireshark-gnome-1.0.6-2.el4_7 +1
- Red Hat Enterprise Linux ES version 3 wireshark-1.0.6-EL3.3, wireshark-1.0.6-EL3.3.i386, wireshark-1.0.6-EL3.3.ia64 +3
- Red Hat Enterprise Linux ES version 4 wireshark-1.0.6-2.el4_7, wireshark-1.0.6-2.el4_7.i386, wireshark-1.0.6-2.el4_7.ia64 +3
- Red Hat Enterprise Linux WS version 3 wireshark-1.0.6-EL3.3, wireshark-1.0.6-EL3.3.i386, wireshark-1.0.6-EL3.3.ia64 +3
- Red Hat Enterprise Linux WS version 4 wireshark-1.0.6-2.el4_7, wireshark-1.0.6-2.el4_7.i386, wireshark-1.0.6-2.el4_7.ia64 +3
Fixes 10 records
Priority LOW 35
wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0929 · Published 2008-10-22 · Fixed CWE-20
Priority LOW 28
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02625 · Published 2009-02-16 · Fixed CWE-119
Priority LOW 27
Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2008-12-01 · Fixed CWE-399
Priority LOW 27
Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abor…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2008-10-22 · Fixed CWE-399
Priority LOW 27
The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an inv…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02104 · Published 2008-10-22 · Fixed CWE-399
Priority LOW 25
packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02785 · Published 2008-10-22 · Fixed CWE-399
Priority LOW 24
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01792 · Published 2009-02-16 · Fixed CWE-20
Priority LOW 24
The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01979 · Published 2009-03-14 · Fixed CWE-399
Priority LOW 23
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2008-10-22 · Fixed CWE-399
Priority LOW 23
Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2008-10-22 · Fixed CWE-20
THREATIST.IORead the docs