CVE-2018-9259
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de wireshark · Page n° 4
Vulnérabilité publiée pour wireshark au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 253
CVE-2018-9258
In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-9257
In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-9256
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7421
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7420
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a block-size check for sysdig event blocks.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7419
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7418
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7417
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7337
In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7336
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a NULL pointer.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7335
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7334
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umts_mac.c by rejecting a certain reserved value.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7333
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7332
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7331
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7330
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7329
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7328
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jourCVE-2018-7327
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths.
- Mettez à jour vers 2.6.3-1~ubuntu16.04.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.