Red Hat Security Advisory

RHSA-2014:1676

wireshark security update

Released 2014-10-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) wireshark-1.10.3-12.el7_0, wireshark-gnome-1.10.3-12.el7_0
Red Hat Enterprise Linux Client Optional (v. 7) wireshark-devel-1.10.3-12.el7_0
Red Hat Enterprise Linux Desktop (v. 6) wireshark-1.8.10-8.el6_6, wireshark-gnome-1.8.10-8.el6_6
Red Hat Enterprise Linux Desktop Optional (v. 6) wireshark-1.8.10-8.el6_6, wireshark-devel-1.8.10-8.el6_6
Red Hat Enterprise Linux Server (v. 6) wireshark-1.8.10-8.el6_6, wireshark-1.8.10-8.el6_6.ppc, wireshark-gnome-1.8.10-8.el6_6
Red Hat Enterprise Linux Server (v. 7) wireshark-1.10.3-12.el7_0, wireshark-1.10.3-12.el7_0.ppc, wireshark-gnome-1.10.3-12.el7_0
Red Hat Enterprise Linux Server Optional (v. 6) wireshark-1.8.10-8.el6_6, wireshark-devel-1.8.10-8.el6_6, wireshark-devel-1.8.10-8.el6_6.ppc
Red Hat Enterprise Linux Server Optional (v. 7) wireshark-devel-1.10.3-12.el7_0, wireshark-devel-1.10.3-12.el7_0.ppc
Red Hat Enterprise Linux Workstation (v. 6) wireshark-1.8.10-8.el6_6, wireshark-gnome-1.8.10-8.el6_6
Red Hat Enterprise Linux Workstation (v. 7) wireshark-1.10.3-12.el7_0, wireshark-gnome-1.10.3-12.el7_0
Red Hat Enterprise Linux Workstation Optional (v. 6) wireshark-1.8.10-8.el6_6, wireshark-devel-1.8.10-8.el6_6
Red Hat Enterprise Linux Workstation Optional (v. 7) wireshark-devel-1.10.3-12.el7_0

Fixes 12 records

TI-2014-05284 CVE-2014-6431 · GHSA-92p5-pxx8-rcmg

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS…

LOW 29

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (ap…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03409 Published 2014-09-20 Fixed CWE-119

TI-2014-05281 CVE-2014-6428 · GHSA-r2fw-54pj-g46j

The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in…

LOW 29

The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0319 Published 2014-09-20 Fixed CWE-119

TI-2014-05280 CVE-2014-6427 · GHSA-q85h-h79c-h39c

Off-by-one error in the is_rtsp_request_or_reply function in…

LOW 29

Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of se…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03375 Published 2014-09-20 Fixed CWE-119

TI-2014-05275 CVE-2014-6422 · GHSA-vf77-5656-m39r

The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a…

LOW 29

The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03163 Published 2014-09-20 Fixed CWE-119

TI-2014-05285 CVE-2014-6432 · GHSA-86wp-pq9q-983q

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remot…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-399

TI-2014-05283 CVE-2014-6430 · GHSA-6fh4-q257-5pm4

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a de…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-20

TI-2014-05282 CVE-2014-6429 · GHSA-785v-989g-jhfx

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-20

TI-2014-05278 CVE-2014-6425 · GHSA-75mm-8952-gf7g

The (1) get_quoted_string and (2) get_unquoted_string functions in…

LOW 28

The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial of service (buffer over-re…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02811 Published 2014-09-20 Fixed CWE-119

TI-2014-05277 CVE-2014-6424 · GHSA-g2qv-xj2h-f4jm

The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow…

LOW 28

The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02933 Published 2014-09-20 Fixed CWE-119

TI-2014-05276 CVE-2014-6423 · GHSA-cfvx-m64x-v285

The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector…

LOW 28

The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (infinite loop) vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-399

TI-2014-05274 CVE-2014-6421 · GHSA-r6wm-v578-w5jm

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10…

LOW 28

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership bet…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02908 Published 2014-09-20 Fixed

TI-2014-05279 CVE-2014-6426 · GHSA-644x-h855-42xq

The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in…

LOW 27

The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service (infini…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02377 Published 2014-09-20 Fixed CWE-399