Summary
The network debugging tool wireshark was updated to version 2.2.7 to fix the following issues:
- CVE-2017-9352: Bazaar dissector infinite loop (wnpa-sec-2017-22) (bsc#1042304)
- CVE-2017-9348: DOF dissector read overflow (wnpa-sec-2017-23) (bsc#1042303)
- CVE-2017-9351: DHCP dissector read overflow (wnpa-sec-2017-24) (bsc#1042302)
- CVE-2017-9346: SoulSeek dissector infinite loop (wnpa-sec-2017-25) (bsc#1042301)
- CVE-2017-9345: DNS dissector infinite loop (wnpa-sec-2017-26) (bsc#1042300)
- CVE-2017-9349: DICOM dissector infinite loop (wnpa-sec-2017-27) (bsc#1042305)
- CVE-2017-9350: openSAFETY dissector memory exh.. (wnpa-sec-2017-28) (bsc#1042299)
- CVE-2017-9344: BT L2CAP dissector divide by zero (wnpa-sec-2017-29) (bsc#1042298)
- CVE-2017-9343: MSNIP dissector crash (wnpa-sec-2017-30) (bsc#1042309)
- CVE-2017-9347: ROS dissector crash (wnpa-sec-2017-31) (bsc#1042308)
- CVE-2017-9354: RGMP dissector crash (wnpa-sec-2017-32) (bsc#1042307)
- CVE-2017-9353: wireshark: IPv6 dissector crash (wnpa-sec-2017-33) (bsc#1042306)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 SP2 Linux Enterprise Desktop 12 SP2 | wireshark | 2.2.7-47.1 |
| SUSE · SLES 12 SP2 Linux Enterprise Server 12 SP2 | wireshark | 2.2.7-47.1 |
| SUSE · SLES 12 SP2 Linux Enterprise Server for Raspberry Pi 12 SP2 | wireshark | 2.2.7-47.1 |
| SUSE · SLES for SAP 12 SP2 Linux Enterprise Server for SAP Applications 12 SP2 | wireshark | 2.2.7-47.1 |
| SUSE · SLES 12 SP2 Linux Enterprise Software Development Kit 12 SP2 | wireshark | 2.2.7-47.1 |
Vulnerabilities 12
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed i…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addres…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissecto…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/d…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This wa…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addre…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addresse…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by val…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/…
References
-
report
https://bugzilla.suse.com/1042298
-
report
https://bugzilla.suse.com/1042299
-
report
https://bugzilla.suse.com/1042300
-
report
https://bugzilla.suse.com/1042301
-
report
https://bugzilla.suse.com/1042302
-
report
https://bugzilla.suse.com/1042303
-
report
https://bugzilla.suse.com/1042304
-
report
https://bugzilla.suse.com/1042305
-
report
https://bugzilla.suse.com/1042306
-
report
https://bugzilla.suse.com/1042307
-
report
https://bugzilla.suse.com/1042308
-
report
https://bugzilla.suse.com/1042309
-
web
https://www.suse.com/security/cve/CVE-2017-9343
-
web
https://www.suse.com/security/cve/CVE-2017-9344
-
web
https://www.suse.com/security/cve/CVE-2017-9345
-
web
https://www.suse.com/security/cve/CVE-2017-9346
-
web
https://www.suse.com/security/cve/CVE-2017-9347
-
web
https://www.suse.com/security/cve/CVE-2017-9348
-
web
https://www.suse.com/security/cve/CVE-2017-9349
-
web
https://www.suse.com/security/cve/CVE-2017-9350
-
web
https://www.suse.com/security/cve/CVE-2017-9351
-
web
https://www.suse.com/security/cve/CVE-2017-9352
-
web
https://www.suse.com/security/cve/CVE-2017-9353
-
web
https://www.suse.com/security/cve/CVE-2017-9354