MGASA-2016-0153
Dashboard / Vulnerabilities / MGASA-2016-0153
MGASA-2016-0153
Summary: Updated wireshark packages fix security vulnerabilities
Details: Updated wireshark packages fix security vulnerabilities: The NCP dissector could crash (CVE-2016-4076). TShark could crash due to a packet reassembly bug (CVE-2016-4077). The IEEE 802.11 dissector could crash (CVE-2016-4078). The PKTC dissector could crash (CVE-2016-4079). The PKTC dissector could crash (CVE-2016-4080). The IAX2 dissector could go into an infinite loop (CVE-2016-4081). Wireshark and TShark could exhaust the stack (CVE-2016-4006). The GSM CBCH dissector could crash (CVE-2016-4082). MS-WSP dissector crash (CVE-2016-4083, CVE-2016-4084).
References: https://advisories.mageia.org/MGASA-2016-0153.html, https://bugs.mageia.org/show_bug.cgi?id=18260, https://www.wireshark.org/security/wnpa-sec-2016-19.html, https://www.wireshark.org/security/wnpa-sec-2016-20.html, https://www.wireshark.org/security/wnpa-sec-2016-21.html, https://www.wireshark.org/security/wnpa-sec-2016-22.html, https://www.wireshark.org/security/wnpa-sec-2016-23.html, https://www.wireshark.org/security/wnpa-sec-2016-24.html, https://www.wireshark.org/security/wnpa-sec-2016-25.html, https://www.wireshark.org/security/wnpa-sec-2016-26.html, https://www.wireshark.org/security/wnpa-sec-2016-27.html, https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html, https://www.wireshark.org/news/20160422.html
Affected packages
Package
Name: wireshark
Purl: pkg:rpm/mageia/wireshark?arch=source&distro=mageia-5
Affected ranges
Type: ECOSYSTEM
Events:
