Red Hat Security AdvisoryRHSA-2010:0625
wireshark security update
Released 2010-08-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 wireshark-1.0.15-EL3.1, wireshark-1.0.15-EL3.1.i386, wireshark-gnome-1.0.15-EL3.1 +1
- Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.15-1.el5_5.1, wireshark-1.0.15-1.el5_5.1.i386, wireshark-1.0.15-1.el5_5.1.ia64 +5
- Red Hat Enterprise Linux AS version 3 wireshark-1.0.15-EL3.1, wireshark-1.0.15-EL3.1.i386, wireshark-1.0.15-EL3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 wireshark-1.0.15-1.el4_8.1, wireshark-1.0.15-1.el4_8.1.i386, wireshark-1.0.15-1.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.15-1.el5_5.1, wireshark-1.0.15-1.el5_5.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.15-1.el5_5.1, wireshark-gnome-1.0.15-1.el5_5.1, wireshark-gnome-1.0.15-1.el5_5.1.i386
- Red Hat Enterprise Linux Desktop version 4 wireshark-1.0.15-1.el4_8.1, wireshark-1.0.15-1.el4_8.1.i386, wireshark-gnome-1.0.15-1.el4_8.1 +1
- Red Hat Enterprise Linux ES version 3 wireshark-1.0.15-EL3.1, wireshark-1.0.15-EL3.1.i386, wireshark-1.0.15-EL3.1.ia64 +3
- Red Hat Enterprise Linux ES version 4 wireshark-1.0.15-1.el4_8.1, wireshark-1.0.15-1.el4_8.1.i386, wireshark-1.0.15-1.el4_8.1.ia64 +3
- Red Hat Enterprise Linux WS version 3 wireshark-1.0.15-EL3.1, wireshark-1.0.15-EL3.1.i386, wireshark-1.0.15-EL3.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 wireshark-1.0.15-1.el4_8.1, wireshark-1.0.15-1.el4_8.1.i386, wireshark-1.0.15-1.el4_8.1.ia64 +3
Fixes 6 records
Priority MEDIUM 52
The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via ve…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06731 · Published 2010-08-13 · Fixed CWE-189
Priority LOW 38
Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.00812 · Published 2010-06-15 · Fixed CWE-119
Priority LOW 38
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.00812 · Published 2010-06-15 · Fixed CWE-119
Priority LOW 23
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01705 · Published 2010-05-11 · Fixed CWE-20
Priority LOW 18
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01119 · Published 2010-06-15 · Fixed CWE-399
Priority LOW 18
The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.01119 · Published 2010-06-15 · Fixed
THREATIST.IORead the docs