wireshark security update

2007-03-1422:22:11

CentOS Project

lists.centos.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.022 Low

EPSS

Percentile

89.2%

JSON

CentOS Errata and Security Advisory CESA-2007:0066

Wireshark is a program for monitoring network traffic.

Several denial of service bugs were found in Wireshark’s LLT, IEEE 802.11,
http, and tcp protocol dissectors. It was possible for Wireshark to crash
or stop responding if it read a malformed packet off the network.
(CVE-2007-0456, CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Users of Wireshark should upgrade to these updated packages containing
Wireshark version 0.99.5, which is not vulnerable to these issues.

Affected packages:
wireshark
wireshark-gnome

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0066

OSVersionArchitecturePackageVersionFilename
CentOS3i386wireshark< 0.99.5-EL3.1wireshark-0.99.5-EL3.1.i386.rpm
CentOS3i386wireshark-gnome< 0.99.5-EL3.1wireshark-gnome-0.99.5-EL3.1.i386.rpm
CentOS3x86_64wireshark< 0.99.5-EL3.1wireshark-0.99.5-EL3.1.x86_64.rpm
CentOS3x86_64wireshark-gnome< 0.99.5-EL3.1wireshark-gnome-0.99.5-EL3.1.x86_64.rpm
CentOS4i386wireshark< 0.99.5-EL4.1wireshark-0.99.5-EL4.1.i386.rpm
CentOS4i386wireshark-gnome< 0.99.5-EL4.1wireshark-gnome-0.99.5-EL4.1.i386.rpm
CentOS4x86_64wireshark< 0.99.5-EL4.1wireshark-0.99.5-EL4.1.x86_64.rpm
CentOS4x86_64wireshark-gnome< 0.99.5-EL4.1wireshark-gnome-0.99.5-EL4.1.x86_64.rpm
CentOS4ia64wireshark< 0.99.5-EL4.1wireshark-0.99.5-EL4.1.ia64.rpm
CentOS4ia64wireshark-gnome< 0.99.5-EL4.1wireshark-gnome-0.99.5-EL4.1.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	wireshark	< 0.99.5-EL3.1	wireshark-0.99.5-EL3.1.i386.rpm
CentOS	3	i386	wireshark-gnome	< 0.99.5-EL3.1	wireshark-gnome-0.99.5-EL3.1.i386.rpm
CentOS	3	x86_64	wireshark	< 0.99.5-EL3.1	wireshark-0.99.5-EL3.1.x86_64.rpm
CentOS	3	x86_64	wireshark-gnome	< 0.99.5-EL3.1	wireshark-gnome-0.99.5-EL3.1.x86_64.rpm
CentOS	4	i386	wireshark	< 0.99.5-EL4.1	wireshark-0.99.5-EL4.1.i386.rpm
CentOS	4	i386	wireshark-gnome	< 0.99.5-EL4.1	wireshark-gnome-0.99.5-EL4.1.i386.rpm
CentOS	4	x86_64	wireshark	< 0.99.5-EL4.1	wireshark-0.99.5-EL4.1.x86_64.rpm
CentOS	4	x86_64	wireshark-gnome	< 0.99.5-EL4.1	wireshark-gnome-0.99.5-EL4.1.x86_64.rpm
CentOS	4	ia64	wireshark	< 0.99.5-EL4.1	wireshark-0.99.5-EL4.1.ia64.rpm
CentOS	4	ia64	wireshark-gnome	< 0.99.5-EL4.1	wireshark-gnome-0.99.5-EL4.1.ia64.rpm