wireshark - security update

Fixed packages 1

Vulnerabilities 17

• Medium 4.2
  CVE-2020-26421

  Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial o…

  The Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Alpine
  Dec 11, 2020
• Low 3.1
  CVE-2020-26418

  Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injec…

  The Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Alpine
  Dec 11, 2020
• Unscored —
  CVE-2019-12295

  In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  May 23, 2019
• Unscored —
  CVE-2019-13619

  In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could …

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Jul 17, 2019
• Unscored —
  CVE-2019-16319

  In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was address…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Sep 15, 2019
• Unscored —
  CVE-2019-19553

  In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/a…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Dec 5, 2019
• Unscored —
  CVE-2020-11647

  In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed …

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Apr 10, 2020
• Unscored —
  CVE-2020-13164

  In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  May 19, 2020
• Unscored —
  CVE-2020-15466

  In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/p…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Jul 5, 2020
• Unscored —
  CVE-2020-25862

  In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Oct 6, 2020
• Unscored —
  CVE-2020-25863

  In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was a…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Oct 6, 2020
• Unscored —
  CVE-2020-26575

  In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was ad…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Oct 6, 2020
• Unscored —
  CVE-2020-28030

  In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by c…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Oct 30, 2020
• Unscored —
  CVE-2020-7045

  In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Jan 16, 2020
• Unscored —
  CVE-2020-9428

  In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in …

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Feb 27, 2020
• Unscored —
  CVE-2020-9430

  In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addre…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Feb 27, 2020
• Unscored —
  CVE-2020-9431

  In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was add…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Feb 27, 2020