[SECURITY] [DLA 1729-1] wireshark security update

2019-03-2521:39:30

lists.debian.org

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.4%

JSON

Package : wireshark
Version : 1.12.1+g01b65bf-4+deb8u18
CVE ID : CVE-2017-9344 CVE-2017-9349 CVE-2019-9209

Several vulnerabilities have been found in wireshark, a network traffic
analyzer.

CVE-2019-9209:
Preventing the crash of the ASN.1 BER and related dissectors by
avoiding a buffer overflow associated with excessive digits in
time values.

CVE-2017-9349:
Fixing an infinite loop in the DICOM dissector by validating
a length value.

CVE-2017-9344:
Avoid a divide by zero, by validating an interval value in the
Bluetooth L2CAP dissector.

For Debian 8 "Jessie", these problems have been fixed in version
1.12.1+g01b65bf-4+deb8u18.

We recommend that you upgrade your wireshark packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9amd64libwiretap8< 2.6.7-1~deb9u1libwiretap8_2.6.7-1~deb9u1_amd64.deb
Debian8armhflibwireshark5< 1.12.1+g01b65bf-4+deb8u18libwireshark5_1.12.1+g01b65bf-4+deb8u18_armhf.deb
Debian9mipslibwireshark-dev< 2.6.7-1~deb9u1libwireshark-dev_2.6.7-1~deb9u1_mips.deb
Debian9mipstshark< 2.6.7-1~deb9u1tshark_2.6.7-1~deb9u1_mips.deb
Debian9alllibwireshark-data< 2.6.7-1~deb9u1libwireshark-data_2.6.7-1~deb9u1_all.deb
Debian8amd64wireshark-dbg< 1.12.1+g01b65bf-4+deb8u18wireshark-dbg_1.12.1+g01b65bf-4+deb8u18_amd64.deb
Debian9amd64wireshark-gtk< 2.6.7-1~deb9u1wireshark-gtk_2.6.7-1~deb9u1_amd64.deb
Debian9armellibwireshark11-dbgsym< 2.6.7-1~deb9u1libwireshark11-dbgsym_2.6.7-1~deb9u1_armel.deb
Debian9i386tshark-dbgsym< 2.6.7-1~deb9u1tshark-dbgsym_2.6.7-1~deb9u1_i386.deb
Debian8armhflibwsutil4< 1.12.1+g01b65bf-4+deb8u18libwsutil4_1.12.1+g01b65bf-4+deb8u18_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	amd64	libwiretap8	< 2.6.7-1~deb9u1	libwiretap8_2.6.7-1~deb9u1_amd64.deb
Debian	8	armhf	libwireshark5	< 1.12.1+g01b65bf-4+deb8u18	libwireshark5_1.12.1+g01b65bf-4+deb8u18_armhf.deb
Debian	9	mips	libwireshark-dev	< 2.6.7-1~deb9u1	libwireshark-dev_2.6.7-1~deb9u1_mips.deb
Debian	9	mips	tshark	< 2.6.7-1~deb9u1	tshark_2.6.7-1~deb9u1_mips.deb
Debian	9	all	libwireshark-data	< 2.6.7-1~deb9u1	libwireshark-data_2.6.7-1~deb9u1_all.deb
Debian	8	amd64	wireshark-dbg	< 1.12.1+g01b65bf-4+deb8u18	wireshark-dbg_1.12.1+g01b65bf-4+deb8u18_amd64.deb
Debian	9	amd64	wireshark-gtk	< 2.6.7-1~deb9u1	wireshark-gtk_2.6.7-1~deb9u1_amd64.deb
Debian	9	armel	libwireshark11-dbgsym	< 2.6.7-1~deb9u1	libwireshark11-dbgsym_2.6.7-1~deb9u1_armel.deb
Debian	9	i386	tshark-dbgsym	< 2.6.7-1~deb9u1	tshark-dbgsym_2.6.7-1~deb9u1_i386.deb
Debian	8	armhf	libwsutil4	< 1.12.1+g01b65bf-4+deb8u18	libwsutil4_1.12.1+g01b65bf-4+deb8u18_armhf.deb