Skip to content
OpenAdvisories
Medium ELSA-2020-1047 7 CVEs

Moderate: wireshark security and bug fix update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Summary

[1.10.14-24.0.1]
- Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect

[1.10.14-24]
- Related: #1613034 - Typo in the previous patch discovered by covscan

[1.10.14-23]
- Related: #1613034 - Fixing an infinite loop created by previous update

[1.10.14-22]
- Related: #1633330 - fixing a couple of covscan issues

[1.10.14-21]
- Related: #1254543 - removing endian shift in packetlogger because it failed to recognize bluetooth hci packet

[1.10.14-20]
- Resolves: #1254543 - valgrind reports errors on pcap file from an older cve

[1.10.14-19]
- Related: #1633330 - A few more checks in the packet dissector

[1.10.14-18]
- Resolves: #1176967 - wireshark crashes opening large packet captures

[1.10.14-17]
- Resolves: #1557212 - CVE-2018-7418 SIGCOMP dissector crash in packet-sigcomp.c
- Resolves: #1588208 - CVE-2018-11362 Out-of-bounds Read in packet-ldss.c
- Resolves: #1612146 - CVE-2018-14340 Multiple dissectors could crash
- Resolves: #1613032 - CVE-2018-14341 DICOM dissector infinite loop
- Resolves: #1613034 - CVE-2018-14368 Bazaar dissector infinite loop
- Resolves: #1633330 - CVE-2018-16057 Radiotap dissector crash
- Resolves: #1660148 - CVE-2018-19622 Infinite loop in the MMSE dissector

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 wireshark 0:1.10.14-24.0.1.el7
Oracle Linux · 7 wireshark-devel 0:1.10.14-24.0.1.el7
Oracle Linux · 7 wireshark-gnome 0:1.10.14-24.0.1.el7

Vulnerabilities 7