Security update for Wireshark SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0664-1 Final 1 1 2017-03-11T05:59:01Z current 2017-03-11T05:59:01Z 2017-03-11T05:59:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for Wireshark This update for Wireshark fixes minor vulnerabilities that could be used to trigger a dissector crash or infinite loops by sending specially crafted packages over the network or into a capture file: - CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11) - CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08) - CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03) - CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10) - CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05) - CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04) - CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09) - CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07) - wnpa-sec-2017-06: STANAG 4607 file parser infinite loop The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html E-Mail link for openSUSE-SU-2017:0664-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.2 wireshark-2.2.5-12.1 wireshark-devel-2.2.5-12.1 wireshark-ui-gtk-2.2.5-12.1 wireshark-ui-qt-2.2.5-12.1 wireshark-2.2.5-12.1 as a component of openSUSE Leap 42.2 wireshark-devel-2.2.5-12.1 as a component of openSUSE Leap 42.2 wireshark-ui-gtk-2.2.5-12.1 as a component of openSUSE Leap 42.2 wireshark-ui-qt-2.2.5-12.1 as a component of openSUSE Leap 42.2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size. CVE-2017-6467 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6467.html CVE-2017-6467 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148181 SUSE Bug 1148181 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records. CVE-2017-6468 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6468.html CVE-2017-6468 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148182 SUSE Bug 1148182 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure. CVE-2017-6469 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6469.html CVE-2017-6469 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148185 SUSE Bug 1148185 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness. CVE-2017-6470 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6470.html CVE-2017-6470 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148186 SUSE Bug 1148186 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length. CVE-2017-6471 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6471.html CVE-2017-6471 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148187 SUSE Bug 1148187 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value. CVE-2017-6472 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6472.html CVE-2017-6472 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148188 SUSE Bug 1148188 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets. CVE-2017-6473 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6473.html CVE-2017-6473 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148189 SUSE Bug 1148189 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes. CVE-2017-6474 openSUSE Leap 42.2:wireshark-2.2.5-12.1 openSUSE Leap 42.2:wireshark-devel-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-gtk-2.2.5-12.1 openSUSE Leap 42.2:wireshark-ui-qt-2.2.5-12.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Please Install the update. https://lists.opensuse.org/opensuse-updates/2017-03/msg00024.html https://www.suse.com/security/cve/CVE-2017-6474.html CVE-2017-6474 https://bugzilla.suse.com/1027998 SUSE Bug 1027998 https://bugzilla.suse.com/1148191 SUSE Bug 1148191