- update to 1.10.5

  + bugs fixed :

  - Wireshark stops showing new packets but dumpcap keeps     writing them to the temp file.

  - Wireshark 1.10.4 shuts down when promiscuous mode is     unchecked.

  - Homeplug dissector bug: STATUS_ACCESS_VIOLATION:
    dissector accessed an invalid memory address.

  - update to 1.10.4 [bnc#855980]

  + vulnerabilities fixed :

  - The SIP dissector could go into an infinite loop.
    wnpa-sec-2013-66 CVE-2013-7112

  - The BSSGP dissector could crash. wnpa-sec-2013-67     CVE-2013-7113

  - The NTLMSSP v2 dissector could crash. Discovered by     Garming Sam. wnpa-sec-2013-68 CVE-2013-7114

  + Further bug fixes and updated protocol support as listed     in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.10.4     .html

The remote Solaris system is missing necessary patches to address security updates :

  - The dissect_sip_common function in     epan/dissectors/packet-sip.c in the SIP dissector in     Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4     does not check for empty lines, which allows remote     attackers to cause a denial of service (infinite loop)     via a crafted packet. (CVE-2013-7112)

  - Multiple buffer overflows in the create_ntlmssp_v2_key     function in epan/ dissectors/packet-ntlmssp.c in the     NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12     and 1.10.x before 1.10.4 allow remote attackers to cause     a denial of service (application crash) via a long     domain name in a packet. (CVE-2013-7114)

Laurent Butti and Garming Sam discovered multiple vulnerabilities in the dissectors for NTLMSSPv2 and BSSGP, which could lead to denial of service or the execution of arbitrary code.

Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2014-2281, CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2013-6336, CVE-2013-6337, CVE-2013-6338, CVE-2013-6339, CVE-2013-6340, CVE-2014-2283, CVE-2013-7112, CVE-2013-7114)

All Wireshark users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of Wireshark must be restarted for the update to take effect.

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2014-2281 , CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2013-6336 , CVE-2013-6337 , CVE-2013-6338 , CVE-2013-6339 , CVE-2013-6340 , CVE-2014-2283 , CVE-2013-7112 , CVE-2013-7114)

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2014-2281, CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2013-6336, CVE-2013-6337, CVE-2013-6338, CVE-2013-6339, CVE-2013-6340, CVE-2014-2283, CVE-2013-7112, CVE-2013-7114)

All running instances of Wireshark must be restarted for the update to take effect.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
75415	openSUSE Security Update : wireshark (openSUSE-SU-2014:0017-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
80811	Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark9)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
71585	Debian DSA-2825-1 : wireshark - several vulnerabilities	Nessus	Debian Local Security Checks	2013/12/23	2021/1/11	medium
73282	RHEL 6 : wireshark (RHSA-2014:0342)	Nessus	Red Hat Local Security Checks	2014/4/1	2021/1/14	high
78273	Amazon Linux AMI : wireshark (ALAS-2014-330)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2018/9/27	high
73286	Scientific Linux Security Update : wireshark on SL6.x i386/x86_64 (20140331)	Nessus	Scientific Linux Local Security Checks	2014/4/1	2021/1/14	high

检测

插件搜索

medium

medium

medium

high

high

high