Red Hat Security Advisory

RHSA-2012:0509

wireshark security update

Released 2012-04-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) wireshark-1.2.15-2.el6_2.1
Red Hat Enterprise Linux Desktop Optional (v. 6) wireshark-1.2.15-2.el6_2.1, wireshark-devel-1.2.15-2.el6_2.1, wireshark-gnome-1.2.15-2.el6_2.1
Red Hat Enterprise Linux Server (v. 6) wireshark-1.2.15-2.el6_2.1, wireshark-1.2.15-2.el6_2.1.ppc
Red Hat Enterprise Linux Server Optional (v. 6) wireshark-1.2.15-2.el6_2.1, wireshark-devel-1.2.15-2.el6_2.1, wireshark-devel-1.2.15-2.el6_2.1.ppc +1
Red Hat Enterprise Linux Workstation (v. 6) wireshark-1.2.15-2.el6_2.1
Red Hat Enterprise Linux Workstation Optional (v. 6) wireshark-1.2.15-2.el6_2.1, wireshark-devel-1.2.15-2.el6_2.1, wireshark-gnome-1.2.15-2.el6_2.1

Fixes 15 records

TI-2011-00996 CVE-2011-1143 · GHSA-fqm8-3vrc-483f

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4…

LOW 31

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0859 Published 2011-03-03 Fixed

TI-2012-00066 CVE-2012-0067 · GHSA-33pw-6955-4qx6

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote…

LOW 29

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06523 Published 2012-04-11 Partial fix CWE-20

TI-2012-00065 CVE-2012-0066 · GHSA-4435-68hj-c5gh

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a…

LOW 26

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03162 Published 2012-04-11 Partial fix CWE-20

TI-2011-03620 CVE-2011-4102 · GHSA-r3wc-v5w3-cx98

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF…

LOW 26

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03179 Published 2011-11-03 Partial fix CWE-119

TI-2011-01729 CVE-2011-1959 · GHSA-8qfq-3vq7-6vqq

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x…

LOW 26

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (appli…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03048 Published 2011-06-06 Partial fix CWE-119

TI-2011-02259 CVE-2011-2597 · GHSA-346j-jpcf-2285

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and…

LOW 25

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02496 Published 2011-07-07 Fixed CWE-399

TI-2011-01728 CVE-2011-1958 · GHSA-3q83-jxph-xjf8

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote…

LOW 25

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02876 Published 2011-06-06 Partial fix

TI-2011-01727 CVE-2011-1957 · GHSA-8v9w-rjhh-f92v

The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in…

LOW 25

The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an inv…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02626 Published 2011-06-06 Fixed CWE-399

TI-2012-01386 CVE-2012-1595 · GHSA-478p-hcx8-x6c2

The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x…

LOW 24

The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01769 Published 2012-04-11 Fixed CWE-399

TI-2012-00040 CVE-2012-0041 · GHSA-6j5c-vcm6-qh7m

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x…

LOW 24

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demons…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02007 Published 2012-04-11 Partial fix CWE-20

TI-2011-02359 CVE-2011-2698 · GHSA-4j9w-fggf-r5v6

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in…

LOW 24

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02289 Published 2011-08-23 Partial fix CWE-189

TI-2011-01898 CVE-2011-2175 · GHSA-4qqg-m5c4-9c3g

Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x…

LOW 24

Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Ne…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02104 Published 2011-06-06 Partial fix CWE-189

TI-2011-01897 CVE-2011-2174 · GHSA-3648-p859-9652

Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark…

LOW 24

Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01971 Published 2011-06-06 Fixed CWE-399

TI-2011-01409 CVE-2011-1590 · GHSA-w9cx-3763-q7p4

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not…

LOW 24

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a cr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01812 Published 2011-04-29 Fixed CWE-399

TI-2012-00041 CVE-2012-0042 · GHSA-g5x6-f983-368j

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain…

LOW 18

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.01854 Published 2012-04-11 Partial fix