Summary
It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malform packets onto
the wire or convincing someone to read a malformed packet trace file.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | wireshark | 2.6.8-1~ubuntu16.04.0 |
| Ubuntu · 18.04 LTS 18.04:LTS | wireshark | 2.6.8-1~ubuntu18.04.0 |
Vulnerabilities 9
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/…
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in w…
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/diss…
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/d…
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dis…
-
Unscored —
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed i…
-
Unscored —
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/…
-
Unscored —
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed i…
-
Unscored —
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors…
References
-
report
https://ubuntu.com/security/CVE-2019-9208
-
report
https://ubuntu.com/security/CVE-2019-9209
-
report
https://ubuntu.com/security/CVE-2019-9214
-
report
https://ubuntu.com/security/CVE-2019-10894
-
report
https://ubuntu.com/security/CVE-2019-10895
-
report
https://ubuntu.com/security/CVE-2019-10896
-
report
https://ubuntu.com/security/CVE-2019-10899
-
report
https://ubuntu.com/security/CVE-2019-10901
-
report
https://ubuntu.com/security/CVE-2019-10903