Summary
[1.10.14-24.0.1]
- Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect
[1.10.14-24]
- Related: #1613034 - Typo in the previous patch discovered by covscan
[1.10.14-23]
- Related: #1613034 - Fixing an infinite loop created by previous update
[1.10.14-22]
- Related: #1633330 - fixing a couple of covscan issues
[1.10.14-21]
- Related: #1254543 - removing endian shift in packetlogger because it failed to recognize bluetooth hci packet
[1.10.14-20]
- Resolves: #1254543 - valgrind reports errors on pcap file from an older cve
[1.10.14-19]
- Related: #1633330 - A few more checks in the packet dissector
[1.10.14-18]
- Resolves: #1176967 - wireshark crashes opening large packet captures
[1.10.14-17]
- Resolves: #1557212 - CVE-2018-7418 SIGCOMP dissector crash in packet-sigcomp.c
- Resolves: #1588208 - CVE-2018-11362 Out-of-bounds Read in packet-ldss.c
- Resolves: #1612146 - CVE-2018-14340 Multiple dissectors could crash
- Resolves: #1613032 - CVE-2018-14341 DICOM dissector infinite loop
- Resolves: #1613034 - CVE-2018-14368 Bazaar dissector infinite loop
- Resolves: #1633330 - CVE-2018-16057 Radiotap dissector crash
- Resolves: #1660148 - CVE-2018-19622 Infinite loop in the MMSE dissector
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | wireshark | 0:1.10.14-24.0.1.el7 |
| Oracle Linux · 7 | wireshark-devel | 0:1.10.14-24.0.1.el7 |
| Oracle Linux · 7 | wireshark-gnome | 0:1.10.14-24.0.1.el7 |
Vulnerabilities 7
-
Unscored —
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dis…
-
Unscored —
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could cras…
-
Unscored —
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite…
-
Unscored —
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infini…
-
Unscored —
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addresse…
-
Unscored —
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed …
-
Unscored —
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissecto…