[SECURITY] [DSA 3002-1] wireshark security update

2014-08-1021:02:16

lists.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%

JSON

Debian Security Advisory DSA-3002-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
August 10, 2014 http://www.debian.org/security/faq

Package : wireshark
CVE ID : CVE-2014-5161 CVE-2014-5162 CVE-2014-5163 CVE-2014-5164
CVE-2014-5165

Multiple vulnerabilities were discovered in the dissectors for Catapult
DCT2000, IrDA, GSM Management, RLC ASN.1 BER, which could result in
denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 1.8.2-5wheezy11.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your wireshark packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7kfreebsd-amd64libwiretap-dev< 1.8.2-5wheezy11libwiretap-dev_1.8.2-5wheezy11_kfreebsd-amd64.deb
Debian7mipsellibwireshark2< 1.8.2-5wheezy11libwireshark2_1.8.2-5wheezy11_mipsel.deb
Debian7mipswireshark-common< 1.8.2-5wheezy11wireshark-common_1.8.2-5wheezy11_mips.deb
Debian7ia64wireshark-dev< 1.8.2-5wheezy11wireshark-dev_1.8.2-5wheezy11_ia64.deb
Debian7amd64wireshark< 1.8.2-5wheezy11wireshark_1.8.2-5wheezy11_amd64.deb
Debian7mipselwireshark-common< 1.8.2-5wheezy11wireshark-common_1.8.2-5wheezy11_mipsel.deb
Debian7s390xlibwiretap2< 1.8.2-5wheezy11libwiretap2_1.8.2-5wheezy11_s390x.deb
Debian7i386wireshark< 1.8.2-5wheezy11wireshark_1.8.2-5wheezy11_i386.deb
Debian7powerpclibwiretap2< 1.8.2-5wheezy11libwiretap2_1.8.2-5wheezy11_powerpc.deb
Debian7armelwireshark-dev< 1.8.2-5wheezy11wireshark-dev_1.8.2-5wheezy11_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	kfreebsd-amd64	libwiretap-dev	< 1.8.2-5wheezy11	libwiretap-dev_1.8.2-5wheezy11_kfreebsd-amd64.deb
Debian	7	mipsel	libwireshark2	< 1.8.2-5wheezy11	libwireshark2_1.8.2-5wheezy11_mipsel.deb
Debian	7	mips	wireshark-common	< 1.8.2-5wheezy11	wireshark-common_1.8.2-5wheezy11_mips.deb
Debian	7	ia64	wireshark-dev	< 1.8.2-5wheezy11	wireshark-dev_1.8.2-5wheezy11_ia64.deb
Debian	7	amd64	wireshark	< 1.8.2-5wheezy11	wireshark_1.8.2-5wheezy11_amd64.deb
Debian	7	mipsel	wireshark-common	< 1.8.2-5wheezy11	wireshark-common_1.8.2-5wheezy11_mipsel.deb
Debian	7	s390x	libwiretap2	< 1.8.2-5wheezy11	libwiretap2_1.8.2-5wheezy11_s390x.deb
Debian	7	i386	wireshark	< 1.8.2-5wheezy11	wireshark_1.8.2-5wheezy11_i386.deb
Debian	7	powerpc	libwiretap2	< 1.8.2-5wheezy11	libwiretap2_1.8.2-5wheezy11_powerpc.deb
Debian	7	armel	wireshark-dev	< 1.8.2-5wheezy11	wireshark-dev_1.8.2-5wheezy11_armel.deb