Mandriva Linux Security Advisory : wireshark (MDVSA-2010:144)

High Nessus Plugin ID 48251


The remote Mandriva Linux host is missing one or more security updates.


This advisory updates wireshark to the latest version(s), fixing several security issues :

Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors (CVE-2010-2284).

Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors (CVE-2010-2287).


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 48251

File Name: mandriva_MDVSA-2010-144.nasl

Version: $Revision: 1.12 $

Type: local

Published: 2010/08/05

Modified: 2016/12/21

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 8.3

Temporal Score: 6.5

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:dumpcap, p-cpe:/a:mandriva:linux:lib64wireshark-devel, p-cpe:/a:mandriva:linux:lib64wireshark0, p-cpe:/a:mandriva:linux:libwireshark-devel, p-cpe:/a:mandriva:linux:libwireshark0, p-cpe:/a:mandriva:linux:rawshark, p-cpe:/a:mandriva:linux:tshark, p-cpe:/a:mandriva:linux:wireshark, p-cpe:/a:mandriva:linux:wireshark-tools, cpe:/o:mandriva:linux:2009.1, cpe:/o:mandriva:linux:2010.0, cpe:/o:mandriva:linux:2010.1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/08/04

Reference Information

CVE: CVE-2010-2284, CVE-2010-2287

BID: 40728

OSVDB: 65372, 65375

MDVSA: 2010:144