Red Hat Security AdvisoryRHSA-2010:0360
wireshark security update
Released 2010-04-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wireshark-1.0.11-EL3.6, wireshark-1.0.11-EL3.6.i386, wireshark-gnome-1.0.11-EL3.6 +1
- Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.11-1.el5_5.5, wireshark-1.0.11-1.el5_5.5.i386, wireshark-1.0.11-1.el5_5.5.ia64 +5
- Red Hat Enterprise Linux AS version 3 wireshark-1.0.11-EL3.6, wireshark-1.0.11-EL3.6.i386, wireshark-1.0.11-EL3.6.ia64 +5
- Red Hat Enterprise Linux AS version 4 wireshark-1.0.11-1.el4_8.5, wireshark-1.0.11-1.el4_8.5.i386, wireshark-1.0.11-1.el4_8.5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.11-1.el5_5.5, wireshark-1.0.11-1.el5_5.5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.11-1.el5_5.5, wireshark-gnome-1.0.11-1.el5_5.5, wireshark-gnome-1.0.11-1.el5_5.5.i386
- Red Hat Enterprise Linux Desktop version 4 wireshark-1.0.11-1.el4_8.5, wireshark-1.0.11-1.el4_8.5.i386, wireshark-gnome-1.0.11-1.el4_8.5 +1
- Red Hat Enterprise Linux ES version 3 wireshark-1.0.11-EL3.6, wireshark-1.0.11-EL3.6.i386, wireshark-1.0.11-EL3.6.ia64 +3
- Red Hat Enterprise Linux ES version 4 wireshark-1.0.11-1.el4_8.5, wireshark-1.0.11-1.el4_8.5.i386, wireshark-1.0.11-1.el4_8.5.ia64 +3
- Red Hat Enterprise Linux WS version 3 wireshark-1.0.11-EL3.6, wireshark-1.0.11-EL3.6.i386, wireshark-1.0.11-EL3.6.ia64 +3
- Red Hat Enterprise Linux WS version 4 wireshark-1.0.11-1.el4_8.5, wireshark-1.0.11-1.el4_8.5.i386, wireshark-1.0.11-1.el4_8.5.ia64 +3
Fixes 7 records
Priority HIGH 71
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stac…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.7408 · Published 2010-02-03 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06075 · Published 2009-10-30 · Fixed CWE-189
Priority LOW 36
Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02597 · Published 2009-07-21 · Fixed
Priority LOW 28
Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02928 · Published 2009-07-21 · Fixed
Priority LOW 27
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02003 · Published 2009-07-21 · Fixed
Priority LOW 25
The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02664 · Published 2009-12-21 · Fixed
Priority LOW 25
The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02493 · Published 2009-10-30 · Fixed
THREATIST.IORead the docs