Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian: DLA-2423-1 Critical: Wireshark Network Protocol Crashes

debian lts
Calendar Grey October 31, 2020
Dist Debian Esm H88
Ubuntu Security Notice USN-4860-1 highlights severe vulnerabilities in OpenSSL, necessitating immediate upgrades for secure communications.
Several vulnerabilities were fixed in the Wireshark network protocol analyzer
Topics%20covered

Topics Covered

security advisory security update remote exploit debian crash issue wireshark protocol analyzer

Summary

CVE-2019-10894

GSS-API dissector crash

CVE-2019-10895

NetScaler file parser crash

CVE-2019-10896

DOF dissector crash

CVE-2019-10899

SRVLOC dissector crash

CVE-2019-10901

LDSS dissector crash

CVE-2019-10903

DCERPC SPOOLSS dissector crash

CVE-2019-12295

Dissection engine could crash

For Debian 9 stretch, these problems have been fixed in version
2.6.8-1.1~deb9u1.

We recommend that you upgrade your wireshark packages.

For the detailed security status of wireshark please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/wireshark

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: wireshark
Version: 2.6.8-1.1~deb9u1
CVE ID: CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10899
Debian Bug: 926718 929446

Topics%20covered

Topics Covered

security advisory security update remote exploit debian crash issue wireshark protocol analyzer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here