Arch Linux: 201706-9 Low Severity: Wireshark-CLI Denial of Service

Arch Linux Security Advisory ASA-201706-9
========================================
Severity: Low
Date    : 2017-06-12
CVE-ID  : CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346
          CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350
          CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354
Package : wireshark-cli
Type    : denial of service
Remote  : Yes
Link    : https://security.archlinux.org/AVG-287

Summary
======
The package wireshark-cli before version 2.2.7-1 is vulnerable to
denial of service.

Resolution
=========
Upgrade to 2.2.7-1.

# pacman -Syu "wireshark-cli>=2.2.7-1"

The problems have been fixed upstream in version 2.2.7.

Workaround
=========
None.

Description
==========
- CVE-2017-9343 (denial of service)

An issue has been found in the MSNIP dissector of Wireshark < 2.2.7,
where NULL pointer dereference can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

- CVE-2017-9344 (denial of service)

An issue has been found in the BT L2CAP dissector of Wireshark < 2.2.7,
where a division by zero can be triggered by injecting a malicious
packet into the wire or by convincing someone to read a malformed
packet trace file.

- CVE-2017-9345 (denial of service)

An issue has been found in the DNS dissector of Wireshark < 2.2.7,
where an infinite loop can be triggered by injecting a malicious packet
into the wire or by convincing someone to read a malformed packet trace
file.

- CVE-2017-9346 (denial of service)

An issue has been found in the SoulSeek dissector of Wireshark < 2.2.7,
where an infinite loop can be triggered by injecting a malicious packet
into the wire or by convincing someone to read a malformed packet trace
file.

- CVE-2017-9347 (denial of service)

An issue has been found in the ROS dissector of Wireshark < 2.2.7,
where an NULL pointer dereference can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

- CVE-2017-9348 (denial of service)

An issue has been found in the DOF dissector of Wireshark < 2.2.7,
where a heap-based out-of-bounds read can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

- CVE-2017-9349 (denial of service)

An issue has been found in the DICOM dissector of Wireshark < 2.2.7,
where an infinite loop can be triggered by injecting a malicious packet
into the wire or by convincing someone to read a malformed packet trace
file.

- CVE-2017-9350 (denial of service)

An issue has been found in the openSAFETY dissector of Wireshark <
2.2.7, where an over-sized memory allocation can be triggered by
injecting a malicious packet into the wire or by convincing someone to
read a malformed packet trace file.

- CVE-2017-9351 (denial of service)

An issue has been found in the DHCP dissector of Wireshark < 2.2.7,
where a heap-based out-of-bounds read can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

- CVE-2017-9352 (denial of service)

An issue has been found in the bazaar dissector of Wireshark < 2.2.7,
where an infinite loop can be triggered by injecting a malicious packet
into the wire or by convincing someone to read a malformed packet trace
file.

- CVE-2017-9353 (denial of service)

An issue has been found in the IPv6 dissector of Wireshark < 2.2.7,
where a NULL pointer dereference can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

- CVE-2017-9354 (denial of service)

An issue has been found in the RGMP dissector of Wireshark < 2.2.7,
where a NULL pointer dereference can be triggered by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

Impact
=====
A remote attacker can cause a denial of service by injecting a
malicious packet into the wire or by convincing someone to read a
malformed packet trace file.

References
=========
https://www.wireshark.org/docs/relnotes/wireshark-2.2.7.html
https://www.wireshark.org/security/wnpa-sec-2017-30.html
https://gitlab.com/wireshark/wireshark/-/issues/13725
https://www.wireshark.org/security/wnpa-sec-2017-29.html
https://gitlab.com/wireshark/wireshark/-/issues/13701
https://www.wireshark.org/security/wnpa-sec-2017-26.html
https://gitlab.com/wireshark/wireshark/-/issues/13633
https://www.wireshark.org/security/wnpa-sec-2017-25.html
https://gitlab.com/wireshark/wireshark/-/issues/13631
https://www.wireshark.org/security/wnpa-sec-2017-31.html
https://gitlab.com/wireshark/wireshark/-/issues/13637
https://www.wireshark.org/security/wnpa-sec-2017-23.html
https://gitlab.com/wireshark/wireshark/-/issues/13608
https://www.wireshark.org/security/wnpa-sec-2017-27.html
https://gitlab.com/wireshark/wireshark/-/issues/13685
https://www.wireshark.org/security/wnpa-sec-2017-28.html
https://gitlab.com/wireshark/wireshark/-/issues/13649
https://www.wireshark.org/security/wnpa-sec-2017-24.html
https://gitlab.com/wireshark/wireshark/-/issues/13609
https://gitlab.com/wireshark/wireshark/-/issues/13628
https://www.wireshark.org/security/wnpa-sec-2017-22.html
https://gitlab.com/wireshark/wireshark/-/issues/13599
https://www.wireshark.org/security/wnpa-sec-2017-33.html
https://gitlab.com/wireshark/wireshark/-/issues/13675
https://www.wireshark.org/security/wnpa-sec-2017-32.html
https://gitlab.com/wireshark/wireshark/-/issues/13646
https://security.archlinux.org/CVE-2017-9343
https://security.archlinux.org/CVE-2017-9344
https://security.archlinux.org/CVE-2017-9345
https://security.archlinux.org/CVE-2017-9346
https://security.archlinux.org/CVE-2017-9347
https://security.archlinux.org/CVE-2017-9348
https://security.archlinux.org/CVE-2017-9349
https://security.archlinux.org/CVE-2017-9350
https://security.archlinux.org/CVE-2017-9351
https://security.archlinux.org/CVE-2017-9352
https://security.archlinux.org/CVE-2017-9353
https://security.archlinux.org/CVE-2017-9354