Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian: DLA-2849-1 Moderate: Wireshark Memory And Buffer Flaws

debian lts
Calendar Grey December 26, 2021
Dist Debian Esm H88
Elevate the Wireshark version in Debian LTS to rectify various security vulnerabilities discovered in network analysis software.
Several vulnerabilities were fixed in the network traffic analyzer Wireshark
Topics%20covered

Topics Covered

security advisory buffer overflow software update debian network traffic memory consumption dissector issue

Summary

CVE-2021-22207

Excessive memory consumption in the MS-WSP dissector.

CVE-2021-22235

Crash in the DNP dissector.

CVE-2021-39921

NULL pointer exception in the Modbus dissector.

CVE-2021-39922

Buffer overflow in the C12.22 dissector.

CVE-2021-39923

Large loop in the PNRP dissector.

CVE-2021-39924

Large loop in the Bluetooth DHT dissector.

CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector.

CVE-2021-39928

NULL pointer exception in the IEEE 802.11 dissector.

CVE-2021-39929

Uncontrolled Recursion in the Bluetooth DHT dissector.

For Debian 9 stretch, these problems have been fixed in version
2.6.20-0+deb9u2.

We recommend that you upgrade your wireshark packages.

For the detailed security status of wireshark please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/wireshark

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Package: wireshark
Version: 2.6.20-0+deb9u2
CVE ID: CVE-2021-22207 CVE-2021-22235 CVE-2021-39921 CVE-2021-39922
Debian Bug: 987853

Topics%20covered

Topics Covered

security advisory buffer overflow software update debian network traffic memory consumption dissector issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here