shield Security update for wireshark

SUSE-SLE-SERVER-12-SP2-2017-1583

This update for wireshark to version 2.2.9 fixes several issues. These security issues were fixed: - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation (bsc#1056248). - CVE-2017-13766: The Profinet I/O dissector could have crash with an out-of-bounds write. This was addressed by adding string validation (bsc#1056249). - CVE-2017-13765: The IrCOMM dissector had a buffer over-read and application crash. This was addressed by adding length validation (bsc#1056251). - CVE-2017-9766: PROFINET IO data with a high recursion depth allowed remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function (bsc#1045341). - CVE-2017-9617: Deeply nested DAAP data may have cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in the DAAP dissector (bsc#1044417).

• Release Date
  Sep 22 2017
• References
  Bugzilla: 1044417, 1045341, 1056251, 1056249, 1056248
  CVEs: CVE-2017-9766, CVE-2017-9617, CVE-2017-13766, CVE-2017-13767, CVE-2017-13765
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libwireshark8
  Network packet dissection library

  2.2.9-48.9.2 lock rpm

  libwiretap6
  Wireshark library for tapping

  2.2.9-48.9.2 lock rpm

  libwscodecs1
  Network packet dissection codecs library

  2.2.9-48.9.2 lock rpm

  libwsutil7
  Library for wireshark utilities

  2.2.9-48.9.2 lock rpm

  wireshark
  A Network Traffic Analyser

  2.2.9-48.9.2 lock rpm lock src

  wireshark-gtk
  A Network Traffic Analyser - GTK+ UI

  2.2.9-48.9.2 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libwireshark8
  Network packet dissection library

  2.2.9-48.9.2 lock rpm

  libwiretap6
  Wireshark library for tapping

  2.2.9-48.9.2 lock rpm

  libwscodecs1
  Network packet dissection codecs library

  2.2.9-48.9.2 lock rpm

  libwsutil7
  Library for wireshark utilities

  2.2.9-48.9.2 lock rpm

  wireshark
  A Network Traffic Analyser

  2.2.9-48.9.2 lock rpm lock src

  wireshark-gtk
  A Network Traffic Analyser - GTK+ UI

  2.2.9-48.9.2 lock rpm

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libwireshark8
  Network packet dissection library

  2.2.9-48.9.2 lock rpm

  libwiretap6
  Wireshark library for tapping

  2.2.9-48.9.2 lock rpm

  libwscodecs1
  Network packet dissection codecs library

  2.2.9-48.9.2 lock rpm

  libwsutil7
  Library for wireshark utilities

  2.2.9-48.9.2 lock rpm

  wireshark
  A Network Traffic Analyser

  2.2.9-48.9.2 lock rpm lock src

  wireshark-gtk
  A Network Traffic Analyser - GTK+ UI

  2.2.9-48.9.2 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libwireshark8
  Network packet dissection library

  2.2.9-48.9.2 lock rpm

  libwiretap6
  Wireshark library for tapping

  2.2.9-48.9.2 lock rpm

  libwscodecs1
  Network packet dissection codecs library

  2.2.9-48.9.2 lock rpm

  libwsutil7
  Library for wireshark utilities

  2.2.9-48.9.2 lock rpm

  wireshark
  A Network Traffic Analyser

  2.2.9-48.9.2 lock rpm lock src

  wireshark-gtk
  A Network Traffic Analyser - GTK+ UI

  2.2.9-48.9.2 lock rpm