Red Hat Security Advisory

RHSA-2020:1047

wireshark security and bug fix update

Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) wireshark-1.10.14-24.el7, wireshark-gnome-1.10.14-24.el7
Red Hat Enterprise Linux Client Optional (v. 7) wireshark-devel-1.10.14-24.el7
Red Hat Enterprise Linux Server (v. 7) wireshark-1.10.14-24.el7, wireshark-1.10.14-24.el7.ppc, wireshark-gnome-1.10.14-24.el7
Red Hat Enterprise Linux Server Optional (v. 7) wireshark-devel-1.10.14-24.el7, wireshark-devel-1.10.14-24.el7.ppc
Red Hat Enterprise Linux Workstation (v. 7) wireshark-1.10.14-24.el7, wireshark-gnome-1.10.14-24.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) wireshark-devel-1.10.14-24.el7

TI-2018-13906 CVE-2018-19622 · GHSA-4q77-2r7r-9qjc

LOW 39

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03241 Published 2018-11-29 Partial fix CWE-835

TI-2018-11484 CVE-2018-16057 · GHSA-984q-rhfc-9www

LOW 39

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03468 Published 2018-08-30 Partial fix

TI-2018-10310 CVE-2018-14368 · GHSA-hh64-96r8-hm69

LOW 39

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03797 Published 2018-07-19 Partial fix CWE-835

TI-2018-10284 CVE-2018-14341 · GHSA-5jpr-m45q-rqq4

LOW 39

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03619 Published 2018-07-19 Partial fix CWE-190

TI-2018-10283 CVE-2018-14340 · GHSA-5mf4-rfcc-fxpq

LOW 39

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03472 Published 2018-07-19 Partial fix CWE-125

TI-2018-08104 CVE-2018-11362 · GHSA-phvv-9748-c5fx

LOW 38

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03019 Published 2018-05-22 Partial fix CWE-125

TI-2018-05349 CVE-2018-7418 · GHSA-83jh-33fh-wm59

LOW 38

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0267 Published 2018-02-23 Partial fix