Red Hat Security Advisory: wireshark security, bug fix, and enhancement update

Fixed packages 12

Vulnerabilities 21

• Unscored —
  CVE-2014-8710

  The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before…

  wireshark Debian
  Nov 23, 2014
• Unscored —
  CVE-2014-8711

  Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 an…

  wireshark wireshark Debian Ubuntu
  Nov 23, 2014
• Unscored —
  CVE-2014-8712

  The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.…

  wireshark wireshark Debian Ubuntu
  Nov 23, 2014
• Unscored —
  CVE-2014-8713

  Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissecto…

  wireshark wireshark Debian Ubuntu
  Nov 23, 2014
• Unscored —
  CVE-2014-8714

  The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.1…

  wireshark wireshark Debian Ubuntu
  Nov 23, 2014
• Unscored —
  CVE-2015-0562

  Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0563

  epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0564

  Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-2188

  epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not …

  wireshark wireshark Debian Ubuntu
  Mar 8, 2015
• Unscored —
  CVE-2015-2189

  Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1…

  wireshark wireshark Debian Ubuntu
  Mar 8, 2015
• Unscored —
  CVE-2015-2191

  Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.…

  wireshark wireshark Debian Ubuntu
  Mar 8, 2015
• Unscored —
  CVE-2015-3182

  epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a cer…

  wireshark wireshark Debian Ubuntu
  Jan 4, 2016
• Unscored —
  CVE-2015-3810

  epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algori…

  wireshark Debian
  May 26, 2015
• Unscored —
  CVE-2015-3811

  epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperl…

  wireshark wireshark Debian Ubuntu
  May 26, 2015
• Unscored —
  CVE-2015-3812

  Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wiresha…

  wireshark wireshark Debian Ubuntu
  May 26, 2015
• Unscored —
  CVE-2015-3813

  The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 …

  wireshark Debian
  May 26, 2015
• Unscored —
  CVE-2015-6243

  The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for emp…

  wireshark wireshark Debian Ubuntu
  Aug 24, 2015
• Unscored —
  CVE-2015-6244

  The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x …

  wireshark wireshark Debian Ubuntu
  Aug 24, 2015
• Unscored —
  CVE-2015-6245

  epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integ…

  wireshark wireshark Debian Ubuntu
  Aug 24, 2015
• Unscored —
  CVE-2015-6246

  The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x be…

  wireshark wireshark Debian Ubuntu
  Aug 24, 2015
• Unscored —
  CVE-2015-6248

  The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not c…

  wireshark wireshark Debian Ubuntu
  Aug 24, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163581
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163582
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163584
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1180182
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1180195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1180197
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1199163
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1199165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1199167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1219409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1222434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1222436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1222437
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1222438
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1253354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1253355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1253356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1253357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1253360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1267959
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2393.json
• report
  https://access.redhat.com/security/cve/CVE-2014-8710
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8710
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8710
• article
  https://www.wireshark.org/security/wnpa-sec-2014-20.html
• report
  https://access.redhat.com/security/cve/CVE-2014-8711
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8711
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8711
• article
  https://www.wireshark.org/security/wnpa-sec-2014-21.html
• report
  https://access.redhat.com/security/cve/CVE-2014-8712
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8712
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8712
• article
  https://www.wireshark.org/security/wnpa-sec-2014-22.html
• report
  https://access.redhat.com/security/cve/CVE-2014-8713
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8713
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8713
• report
  https://access.redhat.com/security/cve/CVE-2014-8714