Skip to content
OpenAdvisories
Medium ELSA-2014-1676 12 CVEs

Moderate: wireshark security update (Oracle Linux 7)

Published Oct 21, 2014 · Updated Oct 21, 2014

Ecosystem: Oracle Linux

Summary

[1.10.3-12.0.1.el7]
- Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect

[1.10.3-12]
- security patches
- Related: #1148266

[1.10.3-11]
- security patches
- Resolves: CVE-2014-6421
CVE-2014-6423
CVE-2014-6424
CVE-2014-6425
CVE-2014-6426
CVE-2014-6427
CVE-2014-6428
CVE-2014-6429

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 wireshark 0:1.10.3-12.0.1.el7_0
Oracle Linux · 7 wireshark-devel 0:1.10.3-12.0.1.el7_0
Oracle Linux · 7 wireshark-gnome 0:1.10.3-12.0.1.el7_0

Vulnerabilities 12

  • Unscored —
    CVE-2014-6421

    Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a…

    wireshark wireshark Debian Ubuntu
  • Unscored —
    CVE-2014-6422

    The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows rem…

    wireshark Debian
  • Unscored —
    CVE-2014-6423

    The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.1…

    wireshark Debian
  • Unscored —
    CVE-2014-6424

    The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x b…

    wireshark Debian
  • Unscored —
    CVE-2014-6425

    The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector …

    wireshark Debian
  • Unscored —
    CVE-2014-6426

    The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 doe…

    wireshark Debian
  • Unscored —
    CVE-2014-6427

    Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wir…

    wireshark Debian
  • Unscored —
    CVE-2014-6428

    The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1…

    wireshark Debian
  • Unscored —
    CVE-2014-6429

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian
  • Unscored —
    CVE-2014-6430

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian
  • Unscored —
    CVE-2014-6431

    Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.…

    wireshark Debian
  • Unscored —
    CVE-2014-6432

    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10…

    wireshark Debian