Red Hat Security Advisory

RHSA-2011:0369

wireshark security update

Released 2011-03-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) wireshark-1.2.15-1.el6_0.1
Red Hat Enterprise Linux Desktop Optional (v. 6) wireshark-1.2.15-1.el6_0.1, wireshark-devel-1.2.15-1.el6_0.1, wireshark-gnome-1.2.15-1.el6_0.1
Red Hat Enterprise Linux Server (v. 6) wireshark-1.2.15-1.el6_0.1, wireshark-1.2.15-1.el6_0.1.ppc
Red Hat Enterprise Linux Server Optional (v. 6) wireshark-1.2.15-1.el6_0.1, wireshark-devel-1.2.15-1.el6_0.1, wireshark-devel-1.2.15-1.el6_0.1.ppc +1
Red Hat Enterprise Linux Workstation (v. 6) wireshark-1.2.15-1.el6_0.1
Red Hat Enterprise Linux Workstation Optional (v. 6) wireshark-1.2.15-1.el6_0.1, wireshark-devel-1.2.15-1.el6_0.1, wireshark-gnome-1.2.15-1.el6_0.1

Fixes 6 records

TI-2011-00371 CVE-2011-0444 · GHSA-rfw5-q6jx-2g3h

Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark…

MEDIUM 53

Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07169 Published 2011-01-12 Fixed CWE-119

TI-2011-00465 CVE-2011-0538 · GHSA-mh8c-wx62-vg9v

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized…

MEDIUM 40

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory co…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07508 Published 2011-02-08 Fixed CWE-119

TI-2011-00621 CVE-2011-0713 · GHSA-f84x-5jrq-4c3p

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and…

LOW 36

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0348 Published 2011-03-03 Fixed CWE-119

TI-2011-00993 CVE-2011-1140 · GHSA-rjw2-p6xh-g64w

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and…

LOW 35

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a deni…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.13064 Published 2011-03-03 Fixed CWE-399

TI-2011-00994 CVE-2011-1141 · GHSA-m4vw-5hvc-7fj2

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through…

LOW 26

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP f…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03533 Published 2011-03-03 Fixed CWE-399

TI-2011-00992 CVE-2011-1139 · GHSA-2r6r-22hr-mxcc

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote…

LOW 26

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03277 Published 2011-03-03 Fixed CWE-399