Overview

Request 280659 accepted

Update for Wireshark

The following vulnerabilities allowed Wireshark to be crashed by
injecting a malformed packet onto the wire or by convincing someone
to read a malformed packet trace file.
* The WCCP dissector could crash
wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
* The LPP dissector could crash.
wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
* The DEC DNA Routing Protocol dissector could crash.
wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
* The SMTP dissector could crash.
wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
* Wireshark could crash while decypting TLS/SSL sessions.
wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]

Request History
Andreas Stieger's avatar

AndreasStieger created request

Update for Wireshark

The following vulnerabilities allowed Wireshark to be crashed by
injecting a malformed packet onto the wire or by convincing someone
to read a malformed packet trace file.
* The WCCP dissector could crash
wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
* The LPP dissector could crash.
wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
* The DEC DNA Routing Protocol dissector could crash.
wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
* The SMTP dissector could crash.
wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
* Wireshark could crash while decypting TLS/SSL sessions.
wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]


Maintenance Bot's avatar

maintbot accepted review

accepted


Maintenance Bot's avatar

maintbot approved review

accepted


Victor Pereira's avatar

vpereirabr moved maintenance target to openSUSE:Maintenance:3403


Victor Pereira's avatar

vpereirabr accepted request

ok

openSUSE Build Service is sponsored by