This update fixes the following security issues :

  + The WCCP dissector could crash wnpa-sec-2015-01     CVE-2015-0559 CVE-2015-0560 [boo#912365]

  + The LPP dissector could crash. wnpa-sec-2015-02     CVE-2015-0561 [boo#912368]

  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]

  + The SMTP dissector could crash. wnpa-sec-2015-04     CVE-2015-0563 [boo#912370]

  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]

The version of Wireshark installed on the remote Windows host is prior to 1.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.3 advisory.

  - Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark     1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service     (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
    (CVE-2015-0564)

  - Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in     Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of     service (application crash) via a crafted packet, related to the use of packet-scope memory instead of     pinfo-scope memory. (CVE-2015-0559)

  - The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in     Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures,     which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2015-0560)

  - asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not     validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds     memory access and application crash) via a crafted packet. (CVE-2015-0561)

  - Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing     Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to     cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope     memory instead of pinfo-scope memory. (CVE-2015-0562)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

wireshark has been updated to version 1.10.12 to fix six security issues :

  - The WCCP dissector could crash. (bnc#912365).
    (CVE-2015-0559 / CVE-2015-0560)

  - The LPP dissector could crash. (bnc#912368).
    (CVE-2015-0561)

  - The DEC DNA Routing Protocol dissector could crash.
    (bnc#912369). (CVE-2015-0562)

  - The SMTP dissector could crash. (bnc#912370).
    (CVE-2015-0563)

  - Wireshark could crash while decypting TLS/SSL sessions     (bnc#912372) Further bug fixes and updated protocol     support as listed in:. (CVE-2015-0564)

https://www.wireshark.org/docs/relnotes/wireshark-1.10.12.html

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.3 advisory.

  - Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark     1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service     (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
    (CVE-2015-0564)

  - Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in     Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of     service (application crash) via a crafted packet, related to the use of packet-scope memory instead of     pinfo-scope memory. (CVE-2015-0559)

  - The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in     Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures,     which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2015-0560)

  - asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not     validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds     memory access and application crash) via a crafted packet. (CVE-2015-0561)

  - Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing     Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to     cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope     memory instead of pinfo-scope memory. (CVE-2015-0562)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
80986	openSUSE Security Update : wireshark (openSUSE-SU-2015:0113-1)	Nessus	SuSE Local Security Checks	1/26/2015	1/19/2021	medium
80459	Wireshark 1.12.x < 1.12.3 Multiple Vulnerabilities	Nessus	Windows	1/12/2015	10/20/2026	high
81642	SuSE 11.3 Security Update : wireshark (SAT Patch Number 10279)	Nessus	SuSE Local Security Checks	3/5/2015	1/6/2021	medium
368087	Wireshark 1.12.x < 1.12.3 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	10/20/2026	10/20/2026	high

Detections

Analytics

Plugins Search

medium

high

medium

high