Red Hat Security AdvisoryRHSA-2017:0631
wireshark security and bug fix update
Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) wireshark-1.8.10-25.el6, wireshark-gnome-1.8.10-25.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) wireshark-devel-1.8.10-25.el6
- Red Hat Enterprise Linux Server (v. 6) wireshark-1.8.10-25.el6, wireshark-1.8.10-25.el6.ppc, wireshark-gnome-1.8.10-25.el6
- Red Hat Enterprise Linux Server Optional (v. 6) wireshark-devel-1.8.10-25.el6, wireshark-devel-1.8.10-25.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) wireshark-1.8.10-25.el6, wireshark-gnome-1.8.10-25.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) wireshark-devel-1.8.10-25.el6
Fixes 4 records
Priority MEDIUM 40
Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03674 · Published 2015-05-26 · Partial fix CWE-399
Priority LOW 29
epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a cra…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03208 · Published 2013-06-09 · Fixed CWE-399
Priority LOW 28
The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, w…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02778 · Published 2015-05-26 · Partial fix CWE-399
Priority LOW 28
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02911 · Published 2015-05-26 · Partial fix CWE-17
THREATIST.IORead the docs