< back to search

shield Security update for wireshark
SUSE-SLE-SDK-12-SP2-2017-1583

This update for wireshark to version 2.2.9 fixes several issues. These security issues were fixed: - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation (bsc#1056248). - CVE-2017-13766: The Profinet I/O dissector could have crash with an out-of-bounds write. This was addressed by adding string validation (bsc#1056249). - CVE-2017-13765: The IrCOMM dissector had a buffer over-read and application crash. This was addressed by adding length validation (bsc#1056251). - CVE-2017-9766: PROFINET IO data with a high recursion depth allowed remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function (bsc#1045341). - CVE-2017-9617: Deeply nested DAAP data may have cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in the DAAP dissector (bsc#1044417).

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 s390x
  • Packages
    wireshark
    A Network Traffic Analyser
    2.2.9-48.9.2 lock src
    wireshark-devel
    A Network Traffic Analyser
    2.2.9-48.9.2 lock rpm
SUSE Linux Enterprise Software Development Kit 12.2 aarch64
  • Packages
    wireshark
    A Network Traffic Analyser
    2.2.9-48.9.2 lock src
    wireshark-devel
    A Network Traffic Analyser
    2.2.9-48.9.2 lock rpm
SUSE Linux Enterprise Software Development Kit 12.2 ppc64le
  • Packages
    wireshark
    A Network Traffic Analyser
    2.2.9-48.9.2 lock src
    wireshark-devel
    A Network Traffic Analyser
    2.2.9-48.9.2 lock rpm
SUSE Linux Enterprise Software Development Kit 12.2 x86_64
  • Packages
    wireshark
    A Network Traffic Analyser
    2.2.9-48.9.2 lock src
    wireshark-devel
    A Network Traffic Analyser
    2.2.9-48.9.2 lock rpm