Red Hat Security AdvisoryRHSA-2009:1100
wireshark security update
Released 2009-06-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wireshark-1.0.8-EL3.1, wireshark-1.0.8-EL3.1.i386, wireshark-gnome-1.0.8-EL3.1 +1
- Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.8-1.el5_3.1, wireshark-1.0.8-1.el5_3.1.i386, wireshark-1.0.8-1.el5_3.1.ia64 +5
- Red Hat Enterprise Linux AS version 3 wireshark-1.0.8-EL3.1, wireshark-1.0.8-EL3.1.i386, wireshark-1.0.8-EL3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 wireshark-1.0.8-1.el4_8.1, wireshark-1.0.8-1.el4_8.1.i386, wireshark-1.0.8-1.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.8-1.el5_3.1, wireshark-1.0.8-1.el5_3.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.8-1.el5_3.1, wireshark-gnome-1.0.8-1.el5_3.1, wireshark-gnome-1.0.8-1.el5_3.1.i386
- Red Hat Enterprise Linux Desktop version 4 wireshark-1.0.8-1.el4_8.1, wireshark-1.0.8-1.el4_8.1.i386, wireshark-gnome-1.0.8-1.el4_8.1 +1
- Red Hat Enterprise Linux ES version 3 wireshark-1.0.8-EL3.1, wireshark-1.0.8-EL3.1.i386, wireshark-1.0.8-EL3.1.ia64 +3
- Red Hat Enterprise Linux ES version 4 wireshark-1.0.8-1.el4_8.1, wireshark-1.0.8-1.el4_8.1.i386, wireshark-1.0.8-1.el4_8.1.ia64 +3
- Red Hat Enterprise Linux WS version 3 wireshark-1.0.8-EL3.1, wireshark-1.0.8-EL3.1.i386, wireshark-1.0.8-EL3.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 wireshark-1.0.8-1.el4_8.1, wireshark-1.0.8-1.el4_8.1.i386, wireshark-1.0.8-1.el4_8.1.ia64 +3
Fixes 4 records
Priority MEDIUM 59
Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1523 · Published 2009-04-01 · Fixed CWE-134
Priority LOW 27
Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2009-05-29 · Fixed
Priority LOW 27
Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2009-04-13 · Fixed
Priority LOW 23
The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2009-04-13 · Fixed CWE-20
THREATIST.IORead the docs