File _patchinfo of Package patchinfo.9590

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.9590

<patchinfo incident="9590">
  <issue tracker="bnc" id="1117740">VUL-0: wireshark: multipe dissector crashes and infinite loops fixed in Wireshark 2.6.5 and 2.4.11</issue>
  <issue tracker="cve" id="2018-19622"/>
  <issue tracker="cve" id="2018-19623"/>
  <issue tracker="cve" id="2018-19626"/>
  <issue tracker="cve" id="2018-19627"/>
  <issue tracker="cve" id="2018-19624"/>
  <issue tracker="cve" id="2018-19625"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>AndreasStieger</packager>
  <description>This update for wireshark fixes the following issues:

Update to Wireshark 2.4.11 (bsc#1117740).

Security issues fixed:

- CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
- CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
- CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53) 
- CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
- CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55) 
- CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)

Further bug fixes and updated protocol support as listed in:

- https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html
</description>
  <summary>Security update for wireshark</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.9590

Places