K000150337: Wireshark/tshark vulnerabilities CVE-2018-9262, CVE-2018-9260, CVE-2018-9259, CVE-2018-9258, and CVE-2018-9257

Security Advisory Description CVE-2018-9262 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth. CVE-2018-9260 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)

This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...

CVE-2018-9260

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs...

CVE-2018-9260

CVE-2018-9260 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The IEEE 802.15.4 dissector could crash due to a missing allocation step; Wireshark fixed this in epan/dissectors/packet-ieee802154.c by ensuring an allocation step occurs. Reports from multiple vendors (e.g., SUSE/openSUSE advisories)...

CVE-2018-9260

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs...