SB2014062901 - Gentoo update for Wireshark
Published: June 29, 2014 Updated: March 24, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2014-2281)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet.
2) Buffer overflow (CVE-ID: CVE-2014-2282)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.
3) Input validation error (CVE-ID: CVE-2014-2283)
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet.
4) Buffer overflow (CVE-ID: CVE-2014-2299)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.
5) Input validation error (CVE-ID: CVE-2014-2907)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
6) Input validation error (CVE-ID: CVE-2014-4020)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
7) Buffer overflow (CVE-ID: CVE-2014-4174)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.
Remediation
Install update from vendor's website.