[SECURITY] [DLA 632-1] wireshark security update

2016-09-2115:10:33

lists.debian.org

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

70.5%

JSON

Package : wireshark
Version : 1.12.1+g01b65bf-4+deb8u6~deb7u4
CVE ID : CVE-2016-7176 CVE-2016-7177 CVE-2016-7178
CVE-2016-7179 CVE-2016-7180

Multiple vulnerabilities were discovered in the dissectors for H.225,
Catapult DCT2000, UMTS FP and IPMI, which could result in denial of
service or the execution of arbitrary code.

For Debian 7 "Wheezy", these problems have been fixed in version
1.12.1+g01b65bf-4+deb8u6~deb7u4.

We recommend that you upgrade your wireshark packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian8armhflibwireshark5< 1.12.1+g01b65bf-4+deb8u9libwireshark5_1.12.1+g01b65bf-4+deb8u9_armhf.deb
Debian8powerpclibwiretap-dev< 1.12.1+g01b65bf-4+deb8u9libwiretap-dev_1.12.1+g01b65bf-4+deb8u9_powerpc.deb
Debian8armhflibwiretap-dev< 1.12.1+g01b65bf-4+deb8u9libwiretap-dev_1.12.1+g01b65bf-4+deb8u9_armhf.deb
Debian8kfreebsd-amd64wireshark< 1.12.1+g01b65bf-4+deb8u9wireshark_1.12.1+g01b65bf-4+deb8u9_kfreebsd-amd64.deb
Debian8s390xwireshark-common< 1.12.1+g01b65bf-4+deb8u9wireshark-common_1.12.1+g01b65bf-4+deb8u9_s390x.deb
Debian8mipslibwireshark-dev< 1.12.1+g01b65bf-4+deb8u9libwireshark-dev_1.12.1+g01b65bf-4+deb8u9_mips.deb
Debian8arm64wireshark-dbg< 1.12.1+g01b65bf-4+deb8u9wireshark-dbg_1.12.1+g01b65bf-4+deb8u9_arm64.deb
Debian8amd64libwireshark5< 1.12.1+g01b65bf-4+deb8u9libwireshark5_1.12.1+g01b65bf-4+deb8u9_amd64.deb
Debian8s390xwireshark-qt< 1.12.1+g01b65bf-4+deb8u9wireshark-qt_1.12.1+g01b65bf-4+deb8u9_s390x.deb
Debian8armhflibwiretap4< 1.12.1+g01b65bf-4+deb8u9libwiretap4_1.12.1+g01b65bf-4+deb8u9_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	armhf	libwireshark5	< 1.12.1+g01b65bf-4+deb8u9	libwireshark5_1.12.1+g01b65bf-4+deb8u9_armhf.deb
Debian	8	powerpc	libwiretap-dev	< 1.12.1+g01b65bf-4+deb8u9	libwiretap-dev_1.12.1+g01b65bf-4+deb8u9_powerpc.deb
Debian	8	armhf	libwiretap-dev	< 1.12.1+g01b65bf-4+deb8u9	libwiretap-dev_1.12.1+g01b65bf-4+deb8u9_armhf.deb
Debian	8	kfreebsd-amd64	wireshark	< 1.12.1+g01b65bf-4+deb8u9	wireshark_1.12.1+g01b65bf-4+deb8u9_kfreebsd-amd64.deb
Debian	8	s390x	wireshark-common	< 1.12.1+g01b65bf-4+deb8u9	wireshark-common_1.12.1+g01b65bf-4+deb8u9_s390x.deb
Debian	8	mips	libwireshark-dev	< 1.12.1+g01b65bf-4+deb8u9	libwireshark-dev_1.12.1+g01b65bf-4+deb8u9_mips.deb
Debian	8	arm64	wireshark-dbg	< 1.12.1+g01b65bf-4+deb8u9	wireshark-dbg_1.12.1+g01b65bf-4+deb8u9_arm64.deb
Debian	8	amd64	libwireshark5	< 1.12.1+g01b65bf-4+deb8u9	libwireshark5_1.12.1+g01b65bf-4+deb8u9_amd64.deb
Debian	8	s390x	wireshark-qt	< 1.12.1+g01b65bf-4+deb8u9	wireshark-qt_1.12.1+g01b65bf-4+deb8u9_s390x.deb
Debian	8	armhf	libwiretap4	< 1.12.1+g01b65bf-4+deb8u9	libwiretap4_1.12.1+g01b65bf-4+deb8u9_armhf.deb