Lucene search

K
suseSuseOPENSUSE-SU-2018:1428-1
HistoryMay 26, 2018 - 12:08 a.m.

Security update for wireshark (moderate)

2018-05-2600:08:12
lists.opensuse.org
16

0.005 Low

EPSS

Percentile

72.6%

This update for wireshark fixes the following issues:

Minor vulnerabilities that could be used to trigger dissector crashes or
cause excessive memory use by making Wireshark read specially crafted
packages from the network or capture files (boo#1094301):

  • CVE-2018-11356: DNS dissector crash
  • CVE-2018-11357: Multiple dissectors could consume excessive memory
  • CVE-2018-11358: Q.931 dissector crash
  • CVE-2018-11359: The RRC dissector and other dissectors could crash
  • CVE-2018-11360: GSM A DTAP dissector crash
  • CVE-2018-11362: LDSS dissector crash

This update to version 2.4.7 also contains bug fixes and updated protocol
support as listed in:
<a href=“https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html”>https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</a>