Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2020:1878-1 Rating: moderate References: 1175204 1176908 1176909 1176910 Cross-References: CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 Affected Products: openSUSE Leap 15.1 An update that fixes fo...

Security fix for the ALT Linux 9 package wireshark version 3.2.8-alt1

3.2.8-alt1 built Nov. 6, 2020 Anton Farygin in task 261029 Nov. 3, 2020 Anton Farygin - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

SUSE-SU-2020:3166-1 Security update for wireshark

This update for wireshark fixes the following issues: - Update to wireshark 3.2.7: CVE-2020-25863: MIME Multipart dissector crash bsc1176908 CVE-2020-25862: TCP dissector crash bsc1176909 CVE-2020-25866: BLIP dissector crash bsc1176910 CVE-2020-17498: Kafka dissector crash bsc1175204...

CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

Code injection

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

UBUNTU-CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

CVE-2020-8036 str2tokbuf used incorrectly by print-someip.c

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

CVE-2020-8036

CVE-2020-8036 concerns tcpdump’s tok2strbuf() usage in the SOME/IP dissector (tcpdump 4.10.0-PRE-GIT), with an unsafe call that can impact availability when parsing SOME/IP traffic. Connected advisories and patches reference updates to the tcpdump package (e.g., Photon OS PHSA advisories 3.0-611,...

Security fix for the ALT Linux 10 package wireshark version 3.2.8-alt1

Nov. 3, 2020 Anton Farygin 3.2.8-alt1 - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

DEBIAN-CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

Design/Logic Flaw

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...

Wireshark Denial of Service Vulnerability (CNVD-2020-61065)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the GQUIC dissector in Wireshark versions 3.2.0...

CVE-2020-28030

Wireshark’s GQUIC dissector (in versions 3.2.0–3.2.7) contains a crash risk due to incorrect offset advancement in epan/dissectors/packet-gquic.c. The vulnerability was fixed by correcting the implementation of offset advancement. Public references from Debian and Arch Linux advisories confirm th...

CVE-2020-28030

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement...