Red Hat Security Advisory

RHSA-2014:1677

wireshark security update

Released 2014-10-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) wireshark-1.0.15-7.el5_11, wireshark-1.0.15-7.el5_11.i386, wireshark-1.0.15-7.el5_11.ia64 +5
Red Hat Enterprise Linux Desktop (v. 5 client) wireshark-1.0.15-7.el5_11, wireshark-1.0.15-7.el5_11.i386
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) wireshark-1.0.15-7.el5_11, wireshark-gnome-1.0.15-7.el5_11, wireshark-gnome-1.0.15-7.el5_11.i386

Fixes 9 records

TI-2014-05284 CVE-2014-6431 · GHSA-92p5-pxx8-rcmg

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS…

LOW 29

Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (ap…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03409 Published 2014-09-20 Fixed CWE-119

TI-2014-05281 CVE-2014-6428 · GHSA-r2fw-54pj-g46j

The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in…

LOW 29

The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0319 Published 2014-09-20 Fixed CWE-119

TI-2014-05275 CVE-2014-6422 · GHSA-vf77-5656-m39r

The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a…

LOW 29

The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03163 Published 2014-09-20 Fixed CWE-119

TI-2014-05285 CVE-2014-6432 · GHSA-86wp-pq9q-983q

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remot…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-399

TI-2014-05283 CVE-2014-6430 · GHSA-6fh4-q257-5pm4

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a de…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-20

TI-2014-05282 CVE-2014-6429 · GHSA-785v-989g-jhfx

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in…

LOW 28

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-20

TI-2014-05278 CVE-2014-6425 · GHSA-75mm-8952-gf7g

The (1) get_quoted_string and (2) get_unquoted_string functions in…

LOW 28

The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial of service (buffer over-re…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02811 Published 2014-09-20 Fixed CWE-119

TI-2014-05276 CVE-2014-6423 · GHSA-cfvx-m64x-v285

The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector…

LOW 28

The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (infinite loop) vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03058 Published 2014-09-20 Fixed CWE-399

TI-2014-05274 CVE-2014-6421 · GHSA-r6wm-v578-w5jm

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10…

LOW 28

Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted packet that leverages split memory ownership bet…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02908 Published 2014-09-20 Fixed