Red Hat Security Advisory

RHSA-2013:0125

wireshark security, bug fix, and enhancement update

Released 2013-01-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.15-5.el5, wireshark-1.0.15-5.el5.i386, wireshark-1.0.15-5.el5.ia64 +5
Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.15-5.el5, wireshark-1.0.15-5.el5.i386
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.15-5.el5, wireshark-gnome-1.0.15-5.el5, wireshark-gnome-1.0.15-5.el5.i386

Fixes 13 records

TI-2012-00066 CVE-2012-0067 · GHSA-33pw-6955-4qx6

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote…

LOW 29

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in an AIX iptrace file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06523 Published 2012-04-11 Partial fix CWE-20

TI-2012-00065 CVE-2012-0066 · GHSA-4435-68hj-c5gh

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a…

LOW 26

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03162 Published 2012-04-11 Partial fix CWE-20

TI-2011-03620 CVE-2011-4102 · GHSA-r3wc-v5w3-cx98

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF…

LOW 26

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03179 Published 2011-11-03 Partial fix CWE-119

TI-2011-01729 CVE-2011-1959 · GHSA-8qfq-3vq7-6vqq

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x…

LOW 26

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (appli…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03048 Published 2011-06-06 Partial fix CWE-119

TI-2011-01728 CVE-2011-1958 · GHSA-3q83-jxph-xjf8

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote…

LOW 25

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02876 Published 2011-06-06 Partial fix

TI-2012-00040 CVE-2012-0041 · GHSA-6j5c-vcm6-qh7m

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x…

LOW 24

The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demons…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02007 Published 2012-04-11 Partial fix CWE-20

TI-2011-02359 CVE-2011-2698 · GHSA-4j9w-fggf-r5v6

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in…

LOW 24

Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02289 Published 2011-08-23 Partial fix CWE-189

TI-2011-01898 CVE-2011-2175 · GHSA-4qqg-m5c4-9c3g

Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x…

LOW 24

Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Ne…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02104 Published 2011-06-06 Partial fix CWE-189

TI-2012-03665 CVE-2012-4285 · GHSA-vgfv-r4wf-7rw6

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector…

LOW 20

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.02083 Published 2012-08-16 Fixed CWE-189

TI-2012-03669 CVE-2012-4289 · GHSA-mp4g-mxp3-v6g5

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x…

LOW 19

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.01292 Published 2012-08-16 Fixed CWE-399

TI-2012-03671 CVE-2012-4291 · GHSA-32x4-wf82-frg6

The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before…

LOW 18

The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.01194 Published 2012-08-16 Fixed CWE-399

TI-2012-03670 CVE-2012-4290 · GHSA-56pc-864w-r48r

The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x…

LOW 18

The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.01194 Published 2012-08-16 Fixed CWE-399

TI-2012-00041 CVE-2012-0042 · GHSA-g5x6-f983-368j

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain…

LOW 18

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.01854 Published 2012-04-11 Partial fix