This update for wireshark fixes the following issues :
Update to wireshark 2.2.14, fix such issues :
bsc#1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6
CVE-2018-9256: LWAPP dissector crash
CVE-2018-9260: IEEE 802.15.4 dissector crash
CVE-2018-9261: NBAP dissector crash
CVE-2018-9262: VLAN dissector crash
CVE-2018-9263: Kerberos dissector crash
CVE-2018-9264: ADB dissector crash
CVE-2018-9265: tn3270 dissector has a memory leak
CVE-2018-9266: ISUP dissector memory leak
CVE-2018-9267: LAPD dissector memory leak
CVE-2018-9268: SMB2 dissector memory leak
CVE-2018-9269: GIOP dissector memory leak
CVE-2018-9270: OIDS dissector memory leak
CVE-2018-9271: multipart dissector memory leak
CVE-2018-9272: h223 dissector memory leak
CVE-2018-9273: pcp dissector memory leak
CVE-2018-9274: failure message memory leak
CVE-2018-9259: MP4 dissector crash
Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2018:0980-1.
# The text itself is copyright (C) SUSE.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(109197);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");
script_cve_id("CVE-2018-9256", "CVE-2018-9259", "CVE-2018-9260", "CVE-2018-9261", "CVE-2018-9262", "CVE-2018-9263", "CVE-2018-9264", "CVE-2018-9265", "CVE-2018-9266", "CVE-2018-9267", "CVE-2018-9268", "CVE-2018-9269", "CVE-2018-9270", "CVE-2018-9271", "CVE-2018-9272", "CVE-2018-9273", "CVE-2018-9274");
script_name(english:"SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0980-1)");
script_summary(english:"Checks rpm output for the updated packages.");
script_set_attribute(
attribute:"synopsis",
value:"The remote SUSE host is missing one or more security updates."
);
script_set_attribute(
attribute:"description",
value:
"This update for wireshark fixes the following issues :
- Update to wireshark 2.2.14, fix such issues :
- bsc#1088200 VUL-0: wireshark: multiple vulnerabilities
fixed in 2.2.14, 2.4.6
- CVE-2018-9256: LWAPP dissector crash
- CVE-2018-9260: IEEE 802.15.4 dissector crash
- CVE-2018-9261: NBAP dissector crash
- CVE-2018-9262: VLAN dissector crash
- CVE-2018-9263: Kerberos dissector crash
- CVE-2018-9264: ADB dissector crash
- CVE-2018-9265: tn3270 dissector has a memory leak
- CVE-2018-9266: ISUP dissector memory leak
- CVE-2018-9267: LAPD dissector memory leak
- CVE-2018-9268: SMB2 dissector memory leak
- CVE-2018-9269: GIOP dissector memory leak
- CVE-2018-9270: OIDS dissector memory leak
- CVE-2018-9271: multipart dissector memory leak
- CVE-2018-9272: h223 dissector memory leak
- CVE-2018-9273: pcp dissector memory leak
- CVE-2018-9274: failure message memory leak
- CVE-2018-9259: MP4 dissector crash
Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=1088200"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9256/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9259/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9260/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9261/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9262/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9263/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9264/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9265/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9266/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9267/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9268/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9269/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9270/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9271/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9272/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9273/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2018-9274/"
);
# https://www.suse.com/support/update/announcement/2018/suse-su-20180980-1/
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?93daedc9"
);
script_set_attribute(
attribute:"solution",
value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.
Alternatively you can run the command listed for your product :
SUSE Linux Enterprise Software Development Kit 11-SP4:zypper in -t
patch sdksp4-wireshark-13566=1
SUSE Linux Enterprise Server 11-SP4:zypper in -t patch
slessp4-wireshark-13566=1
SUSE Linux Enterprise Debuginfo 11-SP4:zypper in -t patch
dbgsp4-wireshark-13566=1"
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwireshark8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwiretap6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwscodecs1");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwsutil7");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:wireshark");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:wireshark-gtk");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:11");
script_set_attribute(attribute:"vuln_publication_date", value:"2018/04/04");
script_set_attribute(attribute:"patch_publication_date", value:"2018/04/19");
script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/20");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"SuSE Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES11)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES11", "SUSE " + os_ver);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);
sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES11" && (! preg(pattern:"^(4)$", string:sp))) audit(AUDIT_OS_NOT, "SLES11 SP4", os_ver + " SP" + sp);
flag = 0;
if (rpm_check(release:"SLES11", sp:"4", reference:"libwireshark8-2.2.14-40.25.1")) flag++;
if (rpm_check(release:"SLES11", sp:"4", reference:"libwiretap6-2.2.14-40.25.1")) flag++;
if (rpm_check(release:"SLES11", sp:"4", reference:"libwscodecs1-2.2.14-40.25.1")) flag++;
if (rpm_check(release:"SLES11", sp:"4", reference:"libwsutil7-2.2.14-40.25.1")) flag++;
if (rpm_check(release:"SLES11", sp:"4", reference:"wireshark-2.2.14-40.25.1")) flag++;
if (rpm_check(release:"SLES11", sp:"4", reference:"wireshark-gtk-2.2.14-40.25.1")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "wireshark");
}
Vendor | Product | Version | CPE |
---|---|---|---|
novell | suse_linux | libwireshark8 | p-cpe:/a:novell:suse_linux:libwireshark8 |
novell | suse_linux | libwiretap6 | p-cpe:/a:novell:suse_linux:libwiretap6 |
novell | suse_linux | libwscodecs1 | p-cpe:/a:novell:suse_linux:libwscodecs1 |
novell | suse_linux | libwsutil7 | p-cpe:/a:novell:suse_linux:libwsutil7 |
novell | suse_linux | wireshark | p-cpe:/a:novell:suse_linux:wireshark |
novell | suse_linux | wireshark-gtk | p-cpe:/a:novell:suse_linux:wireshark-gtk |
novell | suse_linux | 11 | cpe:/o:novell:suse_linux:11 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9256
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9259
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9260
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9261
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9262
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9263
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9264
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9265
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9266
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9267
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9268
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9269
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9270
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9271
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9272
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9273
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9274
www.nessus.org/u?93daedc9
bugzilla.suse.com/show_bug.cgi?id=1088200
www.suse.com/security/cve/CVE-2018-9256/
www.suse.com/security/cve/CVE-2018-9259/
www.suse.com/security/cve/CVE-2018-9260/
www.suse.com/security/cve/CVE-2018-9261/
www.suse.com/security/cve/CVE-2018-9262/
www.suse.com/security/cve/CVE-2018-9263/
www.suse.com/security/cve/CVE-2018-9264/
www.suse.com/security/cve/CVE-2018-9265/
www.suse.com/security/cve/CVE-2018-9266/
www.suse.com/security/cve/CVE-2018-9267/
www.suse.com/security/cve/CVE-2018-9268/
www.suse.com/security/cve/CVE-2018-9269/
www.suse.com/security/cve/CVE-2018-9270/
www.suse.com/security/cve/CVE-2018-9271/
www.suse.com/security/cve/CVE-2018-9272/
www.suse.com/security/cve/CVE-2018-9273/
www.suse.com/security/cve/CVE-2018-9274/