[SECURITY] [DSA 5019-1] wireshark security update

2021-12-1019:54:07

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

73.6%

JSON

Debian Security Advisory DSA-5019-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
December 10, 2021 https://www.debian.org/security/faq

Package : wireshark
CVE ID : CVE-2021-22207 CVE-2021-22222 CVE-2021-22235 CVE-2021-39920
CVE-2021-39921 CVE-2021-39922 CVE-2021-39923 CVE-2021-39924
CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929

Multiple vulnerabilities have been discovered in Wireshark, a network
protocol analyzer which could result in denial of service or the execution of
arbitrary code.

For the oldstable distribution (buster), CVE-2021-39925 has been fixed in
in version 2.6.20-0+deb10u2.

For the stable distribution (bullseye), these problems have been fixed in
version 3.4.10-0+deb11u1.

We recommend that you upgrade your wireshark packages.

For the detailed security status of wireshark please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/wireshark

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian11mipselwireshark-qt< 3.4.10-0+deb11u1wireshark-qt_3.4.10-0+deb11u1_mipsel.deb
Debian11mips64eltshark-dbgsym< 3.4.10-0+deb11u1tshark-dbgsym_3.4.10-0+deb11u1_mips64el.deb
Debian11i386libwsutil12-dbgsym< 3.4.10-0+deb11u1libwsutil12-dbgsym_3.4.10-0+deb11u1_i386.deb
Debian11ppc64ellibwireshark14-dbgsym< 3.4.10-0+deb11u1libwireshark14-dbgsym_3.4.10-0+deb11u1_ppc64el.deb
Debian11amd64libwireshark14< 3.4.10-0+deb11u1libwireshark14_3.4.10-0+deb11u1_amd64.deb
Debian11arm64wireshark-dev< 3.4.10-0+deb11u1wireshark-dev_3.4.10-0+deb11u1_arm64.deb
Debian11armelwireshark-common-dbgsym< 3.4.10-0+deb11u1wireshark-common-dbgsym_3.4.10-0+deb11u1_armel.deb
Debian11s390xlibwsutil-dev< 3.4.10-0+deb11u1libwsutil-dev_3.4.10-0+deb11u1_s390x.deb
Debian11amd64libwsutil12-dbgsym< 3.4.10-0+deb11u1libwsutil12-dbgsym_3.4.10-0+deb11u1_amd64.deb
Debian11mipselwireshark-qt-dbgsym< 3.4.10-0+deb11u1wireshark-qt-dbgsym_3.4.10-0+deb11u1_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	mipsel	wireshark-qt	< 3.4.10-0+deb11u1	wireshark-qt_3.4.10-0+deb11u1_mipsel.deb
Debian	11	mips64el	tshark-dbgsym	< 3.4.10-0+deb11u1	tshark-dbgsym_3.4.10-0+deb11u1_mips64el.deb
Debian	11	i386	libwsutil12-dbgsym	< 3.4.10-0+deb11u1	libwsutil12-dbgsym_3.4.10-0+deb11u1_i386.deb
Debian	11	ppc64el	libwireshark14-dbgsym	< 3.4.10-0+deb11u1	libwireshark14-dbgsym_3.4.10-0+deb11u1_ppc64el.deb
Debian	11	amd64	libwireshark14	< 3.4.10-0+deb11u1	libwireshark14_3.4.10-0+deb11u1_amd64.deb
Debian	11	arm64	wireshark-dev	< 3.4.10-0+deb11u1	wireshark-dev_3.4.10-0+deb11u1_arm64.deb
Debian	11	armel	wireshark-common-dbgsym	< 3.4.10-0+deb11u1	wireshark-common-dbgsym_3.4.10-0+deb11u1_armel.deb
Debian	11	s390x	libwsutil-dev	< 3.4.10-0+deb11u1	libwsutil-dev_3.4.10-0+deb11u1_s390x.deb
Debian	11	amd64	libwsutil12-dbgsym	< 3.4.10-0+deb11u1	libwsutil12-dbgsym_3.4.10-0+deb11u1_amd64.deb
Debian	11	mipsel	wireshark-qt-dbgsym	< 3.4.10-0+deb11u1	wireshark-qt-dbgsym_3.4.10-0+deb11u1_mipsel.deb