shield Security update for wireshark

SUSE-SLE-Module-Desktop-Applications-15-2018-1348

This update for wireshark fixes vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (bsc#1094301). This includes: - CVE-2018-11356: DNS dissector crash - CVE-2018-11357: Multiple dissectors could consume excessive memory - CVE-2018-11358: Q.931 dissector crash - CVE-2018-11359: The RRC dissector and other dissectors could crash - CVE-2018-11360: GSM A DTAP dissector crash - CVE-2018-11362: LDSS dissector crash

• Release Date
  Jul 19 2018
• References
  Bugzilla: 1094301
  CVEs: CVE-2018-11362, CVE-2018-11358, CVE-2018-11359, CVE-2018-11356, CVE-2018-11357, CVE-2018-11360
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15 aarch64

• Packages
  wireshark
  A Network Traffic Analyser

  2.4.7-3.3.4 lock src

  wireshark-devel
  A Network Traffic Analyser

  2.4.7-3.3.4 lock rpm

  wireshark-ui-qt
  A Network Traffic Analyser - Qt UI

  2.4.7-3.3.4 lock rpm

Desktop Applications Module 15 ppc64le

• Packages
  wireshark
  A Network Traffic Analyser

  2.4.7-3.3.4 lock src

  wireshark-devel
  A Network Traffic Analyser

  2.4.7-3.3.4 lock rpm

  wireshark-ui-qt
  A Network Traffic Analyser - Qt UI

  2.4.7-3.3.4 lock rpm

Desktop Applications Module 15 x86_64

• Packages
  wireshark
  A Network Traffic Analyser

  2.4.7-3.3.4 lock src

  wireshark-devel
  A Network Traffic Analyser

  2.4.7-3.3.4 lock rpm

  wireshark-ui-qt
  A Network Traffic Analyser - Qt UI

  2.4.7-3.3.4 lock rpm

Desktop Applications Module 15 s390x

• Packages
  wireshark
  A Network Traffic Analyser

  2.4.7-3.3.4 lock src

  wireshark-devel
  A Network Traffic Analyser

  2.4.7-3.3.4 lock rpm

  wireshark-ui-qt
  A Network Traffic Analyser - Qt UI

  2.4.7-3.3.4 lock rpm