epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

- update to 1.10.5

  + bugs fixed :

  - Wireshark stops showing new packets but dumpcap keeps     writing them to the temp file.

  - Wireshark 1.10.4 shuts down when promiscuous mode is     unchecked.

  - Homeplug dissector bug: STATUS_ACCESS_VIOLATION:
    dissector accessed an invalid memory address.

  - update to 1.10.4 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The BSSGP dissector could crash. wnpa-sec-2013-67     CVE-2013-7113

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.10.4     .html

- openSUSE 12.2 and 12.3: update to 1.8.12 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.8.12     .html

  - openSUSE 13.1: update to 1.10.4 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The BSSGP dissector could crash. wnpa-sec-2013-67     CVE-2013-7113

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.10.4     .html

This update fixes a security problem in the BSSGP network protocol dissector that could crash wireshark.

wireshark was updated to security update version 1.8.12, fixing bugs and security issues.

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66. (CVE-2013-7112)

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 (CVE-2013-7114) Further     bug fixes and updated protocol support as listed in :

https://www.wireshark.org/docs/relnotes/wireshark-1.8.12.html

Laurent Butti and Garming Sam discovered multiple vulnerabilities in the dissectors for NTLMSSPv2 and BSSGP, which could lead to denial of service or the execution of arbitrary code.

The installed version of Wireshark 1.10.x is prior to 1.10.4. It is, therefore, affected by denial of service vulnerabilities in the following dissectors and file parsers :

  - BSSGP (Bug #9488)
  - NTLMSSP v2
  - SIP (Bug #9388)
  - libpcap (Bug #9753)

ID	Name	Product	Family	Severity
75415	openSUSE Security Update : wireshark (openSUSE-SU-2014:0017-1)	Nessus	SuSE Local Security Checks	medium
75377	openSUSE Security Update : wireshark (openSUSE-SU-2014:0013-1)	Nessus	SuSE Local Security Checks	medium
73178	SuSE 11.3 Security Update : wireshark (SAT Patch Number 8977)	Nessus	SuSE Local Security Checks	medium
72086	SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8708 / 8709)	Nessus	SuSE Local Security Checks	medium
71585	Debian DSA-2825-1 : wireshark - several vulnerabilities	Nessus	Debian Local Security Checks	medium
71521	Wireshark 1.10.x < 1.10.4 Multiple DoS	Nessus	Windows	high

Detections

Analytics

CVE-2013-7113

high

Tenable Plugins

medium

medium

medium

medium

medium

high