Several issues that could result in a crash within different dissectors have been fixed. Other issues are related to memory leaks or heap-based buffer overflows.

All issue could be caused by special crafted and malformed packets.

For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u11.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code.

This update for wireshark fixes the following issues :

  - Update to wireshark 2.2.14, fix such issues :

  - bsc#1088200 VUL-0: wireshark: multiple vulnerabilities     fixed in 2.2.14, 2.4.6

  - CVE-2018-9256: LWAPP dissector crash

  - CVE-2018-9260: IEEE 802.15.4 dissector crash

  - CVE-2018-9261: NBAP dissector crash

  - CVE-2018-9262: VLAN dissector crash

  - CVE-2018-9263: Kerberos dissector crash

  - CVE-2018-9264: ADB dissector crash

  - CVE-2018-9265: tn3270 dissector has a memory leak

  - CVE-2018-9266: ISUP dissector memory leak

  - CVE-2018-9267: LAPD dissector memory leak

  - CVE-2018-9268: SMB2 dissector memory leak

  - CVE-2018-9269: GIOP dissector memory leak

  - CVE-2018-9270: OIDS dissector memory leak

  - CVE-2018-9271: multipart dissector memory leak

  - CVE-2018-9272: h223 dissector memory leak

  - CVE-2018-9273: pcp dissector memory leak

  - CVE-2018-9274: failure message memory leak

  - CVE-2018-9259: MP4 dissector crash

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Wireshark installed on the remote Windows host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

The version of Wireshark installed on the remote MacOS/MacOSX host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

This update for wireshark fixes the following issues :

Minor vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (boo#1088200) :

  - CVE-2018-9264: ADB dissector crash 

  - CVE-2018-9260: IEEE 802.15.4 dissector crash 

  - CVE-2018-9261: NBAP dissector crash 

  - CVE-2018-9262: VLAN dissector crash

  - CVE-2018-9256: LWAPP dissector crash

  - CVE-2018-9263: Kerberos dissector crash

  - CVE-2018-9259: MP4 dissector crash

  - Memory leaks in multiple dissectors: CVE-2018-9265,     CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,     CVE-2018-9269, CVE-2018-9270, CVE-2018-9271,     CVE-2018-9272, CVE-2018-9273, CVE-2018-9274

This update also contains all upstream bug fixes and updated protocol support as listed in :

https://www.wireshark.org/docs/relnotes/wireshark-2.2.14.html

ID	Name	Product	Family	Published	Updated	Severity
110164	Debian DLA-1388-1 : wireshark security update	Nessus	Debian Local Security Checks	5/29/2018	1/11/2021	high
110318	Debian DSA-4217-1 : wireshark - security update	Nessus	Debian Local Security Checks	6/5/2018	11/13/2018	high
109198	SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)	Nessus	SuSE Local Security Checks	4/20/2018	9/10/2019	high
108885	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities	Nessus	Windows	4/6/2018	11/8/2019	high
109197	SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0980-1)	Nessus	SuSE Local Security Checks	4/20/2018	1/19/2021	high
108884	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities (MacOS)	Nessus	MacOS X Local Security Checks	4/6/2018	11/8/2019	high
108937	openSUSE Security Update : wireshark (openSUSE-2018-347)	Nessus	SuSE Local Security Checks	4/10/2018	1/19/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high