SB2013121601 - Gentoo update for Wireshark
Published: December 16, 2013 Updated: September 25, 2016
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 11 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2013-5717)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
2) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2013-5718)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
3) Resource management error (CVE-ID: CVE-2013-5719)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
4) Buffer overflow (CVE-ID: CVE-2013-5720)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
5) Input validation error (CVE-ID: CVE-2013-5721)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
6) Input validation error (CVE-ID: CVE-2013-5722)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
7) Input validation error (CVE-ID: CVE-2013-6336)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
8) Input validation error (CVE-ID: CVE-2013-6337)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
9) Input validation error (CVE-ID: CVE-2013-6338)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
10) Input validation error (CVE-ID: CVE-2013-6339)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet.
11) Input validation error (CVE-ID: CVE-2013-6340)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Remediation
Install update from vendor's website.