Lucene search

K
amazonAmazonALAS-2017-813
HistoryApr 04, 2017 - 12:00 p.m.

Medium: wireshark

2017-04-0412:00:00
alas.aws.amazon.com
18

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.6%

Issue Overview:

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file.

Affected Packages:

wireshark

Issue Correction:
Run yum update wireshark to update your system.

New Packages:

i686:  
    wireshark-1.8.10-25.22.amzn1.i686  
    wireshark-debuginfo-1.8.10-25.22.amzn1.i686  
    wireshark-devel-1.8.10-25.22.amzn1.i686  
  
src:  
    wireshark-1.8.10-25.22.amzn1.src  
  
x86_64:  
    wireshark-debuginfo-1.8.10-25.22.amzn1.x86_64  
    wireshark-devel-1.8.10-25.22.amzn1.x86_64  
    wireshark-1.8.10-25.22.amzn1.x86_64  

Additional References

Red Hat: CVE-2013-4075, CVE-2015-3811, CVE-2015-3812, CVE-2015-3813

Mitre: CVE-2013-4075, CVE-2015-3811, CVE-2015-3812, CVE-2015-3813

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.6%