ELSA-2015-2393 — Moderate: wireshark security, bug fix, and enhancement update (Oracle Linux 7)

Summary

[1.10.14-7.0.1]
- Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect

[1.10.14-7]
- Rebase some tvbuff API from upstream to 1.10.14
- Fixes crash when tvb_length_remaining() is used
- Related: CVE-2015-6244

[1.10.14-6]
- Security patch
- Resolves: CVE-2015-3182

[1.10.14-5]
- Fix crash caused by -DGDK_PIXBUF_DEPRECATED on startup
- Resolves: rhbz#1267959

[1.10.14-4]
- Security patches
- Resolves: CVE-2015-6243
CVE-2015-6244
CVE-2015-6245
CVE-2015-6246
CVE-2015-6248

[1.10.14-3]
- Security patches
- Resolves: CVE-2015-3810
CVE-2015-3813

[1.10.14-2]
- Add certificate verify message decoding in TLS extension
- Resolves: #1239150

[1.10.14-1]
- Upgrade to 1.10.14
- Resolves: #1238676

[1.10.3-20]
- add master secret extension decoding in TLS extension
- add encrypt-then-mac extension decoding in TLS extension
- Resolves: #1222901

[1.10.3-19]
- create pcap file if -F pcap specified
- Resolves: #1227199

[1.10.3-18]
- add key exchange algorithms decoding in TLS extension
- Resolves: #1222600

[1.10.3-17]
- add signature algorithms decoding in TLS extension
- Resolves: #1221701

[1.10.3-16]
- add relro check
- Resolves: #1092532

[1.10.3-15]
- add elliptic curves decoding in DTLS HELLO
- Resolves: #1131202

[1.10.3-14]
- introduced nanosecond time precision
- Resolves: #1213339

[1.10.3-13]
- security patches
- Resolves: #1148267

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	wireshark	0:1.10.14-7.0.1.el7
Oracle Linux · 7	wireshark-devel	0:1.10.14-7.0.1.el7
Oracle Linux · 7	wireshark-gnome	0:1.10.14-7.0.1.el7

Vulnerabilities 21

Unscored —

CVE-2014-8710

The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before…

wireshark Debian

Nov 23, 2014
Unscored —

CVE-2014-8711

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 an…

wireshark wireshark Debian Ubuntu

Nov 23, 2014
Unscored —

CVE-2014-8712

The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.…

wireshark wireshark Debian Ubuntu

Nov 23, 2014
Unscored —

CVE-2014-8713

Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissecto…

wireshark wireshark Debian Ubuntu

Nov 23, 2014
Unscored —

CVE-2014-8714

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.1…

wireshark wireshark Debian Ubuntu

Nov 23, 2014
Unscored —

CVE-2015-0562

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector…

wireshark wireshark Debian Ubuntu

Jan 10, 2015
Unscored —

CVE-2015-0563

epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an…

wireshark wireshark Debian Ubuntu

Jan 10, 2015
Unscored —

CVE-2015-0564

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.…

wireshark wireshark Debian Ubuntu

Jan 10, 2015
Unscored —

CVE-2015-2188

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not …

wireshark wireshark Debian Ubuntu

Mar 8, 2015
Unscored —

CVE-2015-2189

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1…

wireshark wireshark Debian Ubuntu

Mar 8, 2015
Unscored —

CVE-2015-2191

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.…

wireshark wireshark Debian Ubuntu

Mar 8, 2015
Unscored —

CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a cer…

wireshark wireshark Debian Ubuntu

Jan 4, 2016
Unscored —

CVE-2015-3810

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algori…

wireshark Debian

May 26, 2015
Unscored —

CVE-2015-3811

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperl…

wireshark wireshark Debian Ubuntu

May 26, 2015
Unscored —

CVE-2015-3812

Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wiresha…

wireshark wireshark Debian Ubuntu

May 26, 2015
Unscored —

CVE-2015-3813

The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 …

wireshark Debian

May 26, 2015
Unscored —

CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for emp…

wireshark wireshark Debian Ubuntu

Aug 24, 2015
Unscored —

CVE-2015-6244

The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x …

wireshark wireshark Debian Ubuntu

Aug 24, 2015
Unscored —

CVE-2015-6245

epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integ…

wireshark wireshark Debian Ubuntu

Aug 24, 2015
Unscored —

CVE-2015-6246

The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x be…

wireshark wireshark Debian Ubuntu

Aug 24, 2015
Unscored —

CVE-2015-6248

The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not c…

wireshark wireshark Debian Ubuntu

Aug 24, 2015

Moderate: wireshark security, bug fix, and enhancement update (Oracle Linux 7)

Summary

Fixed packages 3

Vulnerabilities 21

The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before…

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 an…

The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.…

Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissecto…

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.1…

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector…

epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an…

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.…

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not …

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1…

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.…

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a cer…

epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algori…

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperl…

Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wiresha…

The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 …

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for emp…

The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x …

epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integ…

The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x be…

The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not c…