Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:0664-1

Опубликовано: 11 мар. 2017
Источник: suse-cvrf

Описание

Security update for Wireshark

This update for Wireshark fixes minor vulnerabilities that could be used to trigger a dissector crash or infinite loops by sending specially crafted packages over the network or into a capture file:

  • CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  • CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  • CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  • CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  • CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  • CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  • CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  • CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  • wnpa-sec-2017-06: STANAG 4607 file parser infinite loop

Список пакетов

openSUSE Leap 42.2
wireshark-2.2.5-12.1
wireshark-devel-2.2.5-12.1
wireshark-ui-gtk-2.2.5-12.1
wireshark-ui-qt-2.2.5-12.1

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки

Описание

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.


Затронутые продукты
openSUSE Leap 42.2:wireshark-2.2.5-12.1
openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1
openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1

Ссылки
Уязвимость openSUSE-SU-2017:0664-1