Red Hat Security Advisory

RHSA-2015:1460

wireshark security, bug fix, and enhancement update

Released 2015-07-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) wireshark-1.8.10-17.el6, wireshark-gnome-1.8.10-17.el6
Red Hat Enterprise Linux Desktop Optional (v. 6) wireshark-devel-1.8.10-17.el6
Red Hat Enterprise Linux Server (v. 6) wireshark-1.8.10-17.el6, wireshark-1.8.10-17.el6.ppc, wireshark-gnome-1.8.10-17.el6
Red Hat Enterprise Linux Server Optional (v. 6) wireshark-devel-1.8.10-17.el6, wireshark-devel-1.8.10-17.el6.ppc
Red Hat Enterprise Linux Workstation (v. 6) wireshark-1.8.10-17.el6, wireshark-gnome-1.8.10-17.el6
Red Hat Enterprise Linux Workstation Optional (v. 6) wireshark-devel-1.8.10-17.el6

Fixes 9 records

TI-2015-01952 CVE-2015-2189 · GHSA-2g8p-8mm7-ff75

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file…

LOW 30

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.046 Published 2015-03-08 Fixed CWE-189

TI-2015-01954 CVE-2015-2191 · GHSA-mvvm-47h8-xff5

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the…

LOW 29

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infin…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03886 Published 2015-03-08 Partial fix CWE-189

TI-2014-07153 CVE-2014-8714 · GHSA-pv8c-rxr3-j47v

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the…

LOW 29

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (inf…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03488 Published 2014-11-23 Fixed CWE-399

TI-2014-07152 CVE-2014-8713 · GHSA-rpxh-vw36-4cqf

Stack-based buffer overflow in the build_expert_data function in…

LOW 29

Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a deni…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03792 Published 2014-11-23 Partial fix CWE-119

TI-2014-07150 CVE-2014-8711 · GHSA-7q9f-2f5w-393w

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in…

LOW 29

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03233 Published 2014-11-23 Fixed CWE-189

TI-2015-00523 CVE-2015-0564 · GHSA-wmjp-f22x-624h

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c…

LOW 28

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application cras…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02778 Published 2015-01-10 Partial fix CWE-119

TI-2015-00521 CVE-2015-0562 · GHSA-35hj-g5rm-v2ch

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC…

LOW 28

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02648 Published 2015-01-10 Partial fix

TI-2014-07151 CVE-2014-8712 · GHSA-43xh-764p-9whg

The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector…

LOW 28

The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote att…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03101 Published 2014-11-23 Partial fix CWE-399

TI-2014-07149 CVE-2014-8710 · GHSA-jgm9-5rx7-f4x9

The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM…

LOW 28

The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03101 Published 2014-11-23 Partial fix CWE-119