wireshark - security update

2014-08-2000:00:00

Google

osv.dev

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

CVE-2014-5161 /
CVE-2014-5162
The Catapult DCT2000 and IrDA dissectors could underrun a buffer.
It may be possible to make Wireshark crash by injecting a malformed packet onto
the wire or by convincing someone to read a malformed packet trace file.
CVE-2014-5163
The GSM Management dissector could crash.
It may be possible to make Wireshark crash by injecting a malformed packet onto
the wire or by convincing someone to read a malformed packet trace file.

For Debian 6 Squeeze, these issues have been fixed in wireshark version 1.2.11-6+squeeze15

CPENameOperatorVersion
wiresharkeq1.2.11-6+squeeze14
wiresharkeq1.2.11-6+squeeze6
wiresharkeq1.2.11-6+squeeze1
wiresharkeq1.2.11-6+squeeze7
wiresharkeq1.2.11-6+squeeze4
wiresharkeq1.2.11-6+squeeze13
wiresharkeq1.2.11-6+squeeze11
wiresharkeq1.2.11-6+squeeze8
wiresharkeq1.2.11-6+squeeze12
wiresharkeq1.2.11-6+squeeze2

Name	Operator	Version
wireshark	eq	1.2.11-6+squeeze14
wireshark	eq	1.2.11-6+squeeze6
wireshark	eq	1.2.11-6+squeeze1
wireshark	eq	1.2.11-6+squeeze7
wireshark	eq	1.2.11-6+squeeze4
wireshark	eq	1.2.11-6+squeeze13
wireshark	eq	1.2.11-6+squeeze11
wireshark	eq	1.2.11-6+squeeze8
wireshark	eq	1.2.11-6+squeeze12
wireshark	eq	1.2.11-6+squeeze2