|
|
Subscribe / Log in / New account

wireshark: multiple vulnerabilities

Package(s):wireshark CVE #(s):CVE-2016-6511 CVE-2016-6510 CVE-2016-6509 CVE-2016-6508 CVE-2016-6507 CVE-2016-6506 CVE-2016-6505
Created:August 2, 2016 Updated:August 9, 2016
Description:

Wireshark 2.1.1 fixes several vulnerabilities. From the Red Hat bugzilla:

CVE-2016-6511: It was reported that Wireshark could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6510: It was reported that Wireshark's RLC dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6509: It was reported that Wireshark's LDSS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6508: It was reported that Wireshark could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6507: It was reported that Wireshark's MMSE could loop infinitely. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6506: It was reported that Wireshark's WSP could loop infinitely. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

CVE-2016-6505: It was reported that Wireshark's PacketBB could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

bug 1361129: It was reported that Wireshark's NDS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Alerts:
Arch Linux ASA-201608-20 wireshark-cli 2016-08-27
Debian-LTS DLA-595-1 wireshark 2016-08-15
Debian DSA-3648-1 wireshark 2016-08-12
Mageia MGASA-2016-0275 wireshark 2016-08-03
openSUSE openSUSE-SU-2016:1974-1 wireshark 2016-08-06
Fedora FEDORA-2016-a15d2be020 wireshark 2016-08-01

to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds