Description
Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted file that triggers writes of uncompressed bytes beyond the end of the output buffer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wireshark | 1.12.1+g01b65bf-1 | — |
| Debian 13 | wireshark | 1.12.1+g01b65bf-1 | — |
| Debian 12 | wireshark | 1.12.1+g01b65bf-1 | — |
| Debian 7 | wireshark | 1.8.2-5wheezy12 | DSA-3049-1 |
| Debian 6.0 | wireshark | 1.8.2-5wheezy15~deb6u1 | DLA-198-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | wireshark +2 | 1.10.3-12.el7_0 | RHSA-2014:1676 |
| RHEL 6 | wireshark +2 | 1.8.10-8.el6_6 | RHSA-2014:1676 |
| RHEL 5 | wireshark +1 | 1.0.15-7.el5_11 | RHSA-2014:1677 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | wireshark | 2.2.2-1.1 | openSUSE-SU-2024:10199-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | wireshark +2 | 1.10.3-12.0.1.el7_0 | ELSA-2014-1676 |
Advisories 6
- RHSA-2014:1677 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2014:1676 Red Hat Security Advisory: wireshark security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-3049-1 wireshark - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-198-1 wireshark - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10199-1 wireshark-2.2.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2014-1676 Moderate: wireshark security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 21, 2014
References
- http://linux.oracle.com/errata/ELSA-2014-1676
- 61933 third-party-advisory
- openSUSE-SU-2014:1249 vendor-advisory
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10461
- http://www.wireshark.org/security/wnpa-sec-2014-19.html
- RHSA-2014:1677 vendor-advisory
- RHSA-2014:1676 vendor-advisory
- DSA-3049 vendor-advisory
- SUSE-SU-2014:1221 vendor-advisory
- 60280 third-party-advisory
- 60578 third-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-1677
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=47c592938ba9f0caeacc4c2ccadb370e72f293a2
- 61929 third-party-advisory