-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: wireshark security update
Advisory ID:       RHSA-2009:0313-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2009:0313.html
Issue date:        2009-03-04
CVE Names:         CVE-2008-4680 CVE-2008-4681 CVE-2008-4682 
                   CVE-2008-4683 CVE-2008-4684 CVE-2008-4685 
                   CVE-2008-5285 CVE-2009-0599 CVE-2009-0600 
====================================================================
1. Summary:

Updated wireshark packages that fix several security issues are now
available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Description:

Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Multiple buffer overflow flaws were found in Wireshark. If Wireshark read
a malformed packet off a network or opened a malformed dump file, it could
crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2008-4683, CVE-2009-0599)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malformed dump file. (CVE-2008-4680, CVE-2008-4681, CVE-2008-4682,
CVE-2008-4684, CVE-2008-4685, CVE-2008-5285, CVE-2009-0600)

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.6, and resolve these issues. All running instances of
Wireshark must be restarted for the update to take effect.

4. Solution:

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network.  Details on how to use
the Red Hat Network to apply this update are available at

5. Bugs fixed (http://bugzilla.redhat.com/):

468166 - CVE-2008-4680 wireshark: DoS (app crash or abort) via malformed USB Request Block (URB).
468167 - CVE-2008-4681 wireshark: DoS (app crash or abort) in Bluetooth RFCOMM dissector via unknown packets
468169 - CVE-2008-4682 wireshark: DoS (app abort) via a malformed  .ncf file with an unknown/unexpected packet type
468171 - CVE-2008-4683 wireshark: DoS (app crash or abort) in Bluetooth ACL dissector  via a packet with an invalid length
468174 - CVE-2008-4684 wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector
468175 - CVE-2008-4685 wireshark: DoS (app crash or abort) in Q.931 dissector via certain packets
472737 - CVE-2008-5285 wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request
485888 - CVE-2009-0599 wireshark: buffer overflows in NetScreen snoop file reader
485889 - CVE-2009-0600 wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file

6. Package List:

Red Hat Enterprise Linux AS version 3:

Source:

i386:
wireshark-1.0.6-EL3.3.i386.rpm
wireshark-debuginfo-1.0.6-EL3.3.i386.rpm
wireshark-gnome-1.0.6-EL3.3.i386.rpm

ia64:
wireshark-1.0.6-EL3.3.ia64.rpm
wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm
wireshark-gnome-1.0.6-EL3.3.ia64.rpm

ppc:
wireshark-1.0.6-EL3.3.ppc.rpm
wireshark-debuginfo-1.0.6-EL3.3.ppc.rpm
wireshark-gnome-1.0.6-EL3.3.ppc.rpm

s390:
wireshark-1.0.6-EL3.3.s390.rpm
wireshark-debuginfo-1.0.6-EL3.3.s390.rpm
wireshark-gnome-1.0.6-EL3.3.s390.rpm

s390x:
wireshark-1.0.6-EL3.3.s390x.rpm
wireshark-debuginfo-1.0.6-EL3.3.s390x.rpm
wireshark-gnome-1.0.6-EL3.3.s390x.rpm

x86_64:
wireshark-1.0.6-EL3.3.x86_64.rpm
wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm
wireshark-gnome-1.0.6-EL3.3.x86_64.rpm

Red Hat Desktop version 3:

Source:

i386:
wireshark-1.0.6-EL3.3.i386.rpm
wireshark-debuginfo-1.0.6-EL3.3.i386.rpm
wireshark-gnome-1.0.6-EL3.3.i386.rpm

x86_64:
wireshark-1.0.6-EL3.3.x86_64.rpm
wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm
wireshark-gnome-1.0.6-EL3.3.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

Source:

i386:
wireshark-1.0.6-EL3.3.i386.rpm
wireshark-debuginfo-1.0.6-EL3.3.i386.rpm
wireshark-gnome-1.0.6-EL3.3.i386.rpm

ia64:
wireshark-1.0.6-EL3.3.ia64.rpm
wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm
wireshark-gnome-1.0.6-EL3.3.ia64.rpm

x86_64:
wireshark-1.0.6-EL3.3.x86_64.rpm
wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm
wireshark-gnome-1.0.6-EL3.3.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

Source:

i386:
wireshark-1.0.6-EL3.3.i386.rpm
wireshark-debuginfo-1.0.6-EL3.3.i386.rpm
wireshark-gnome-1.0.6-EL3.3.i386.rpm

ia64:
wireshark-1.0.6-EL3.3.ia64.rpm
wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm
wireshark-gnome-1.0.6-EL3.3.ia64.rpm

x86_64:
wireshark-1.0.6-EL3.3.x86_64.rpm
wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm
wireshark-gnome-1.0.6-EL3.3.x86_64.rpm

Red Hat Enterprise Linux AS version 4:

Source:

i386:
wireshark-1.0.6-2.el4_7.i386.rpm
wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm
wireshark-gnome-1.0.6-2.el4_7.i386.rpm

ia64:
wireshark-1.0.6-2.el4_7.ia64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm
wireshark-gnome-1.0.6-2.el4_7.ia64.rpm

ppc:
wireshark-1.0.6-2.el4_7.ppc.rpm
wireshark-debuginfo-1.0.6-2.el4_7.ppc.rpm
wireshark-gnome-1.0.6-2.el4_7.ppc.rpm

s390:
wireshark-1.0.6-2.el4_7.s390.rpm
wireshark-debuginfo-1.0.6-2.el4_7.s390.rpm
wireshark-gnome-1.0.6-2.el4_7.s390.rpm

s390x:
wireshark-1.0.6-2.el4_7.s390x.rpm
wireshark-debuginfo-1.0.6-2.el4_7.s390x.rpm
wireshark-gnome-1.0.6-2.el4_7.s390x.rpm

x86_64:
wireshark-1.0.6-2.el4_7.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm
wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm

Red Hat Enterprise Linux Desktop version 4:

Source:

i386:
wireshark-1.0.6-2.el4_7.i386.rpm
wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm
wireshark-gnome-1.0.6-2.el4_7.i386.rpm

x86_64:
wireshark-1.0.6-2.el4_7.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm
wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm

Red Hat Enterprise Linux ES version 4:

Source:

i386:
wireshark-1.0.6-2.el4_7.i386.rpm
wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm
wireshark-gnome-1.0.6-2.el4_7.i386.rpm

ia64:
wireshark-1.0.6-2.el4_7.ia64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm
wireshark-gnome-1.0.6-2.el4_7.ia64.rpm

x86_64:
wireshark-1.0.6-2.el4_7.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm
wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm

Red Hat Enterprise Linux WS version 4:

Source:

i386:
wireshark-1.0.6-2.el4_7.i386.rpm
wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm
wireshark-gnome-1.0.6-2.el4_7.i386.rpm

ia64:
wireshark-1.0.6-2.el4_7.ia64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm
wireshark-gnome-1.0.6-2.el4_7.ia64.rpm

x86_64:
wireshark-1.0.6-2.el4_7.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm
wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:

i386:
wireshark-1.0.6-2.el5_3.i386.rpm
wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm

x86_64:
wireshark-1.0.6-2.el5_3.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:

i386:
wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm
wireshark-gnome-1.0.6-2.el5_3.i386.rpm

x86_64:
wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm
wireshark-gnome-1.0.6-2.el5_3.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:

i386:
wireshark-1.0.6-2.el5_3.i386.rpm
wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm
wireshark-gnome-1.0.6-2.el5_3.i386.rpm

ia64:
wireshark-1.0.6-2.el5_3.ia64.rpm
wireshark-debuginfo-1.0.6-2.el5_3.ia64.rpm
wireshark-gnome-1.0.6-2.el5_3.ia64.rpm

ppc:
wireshark-1.0.6-2.el5_3.ppc.rpm
wireshark-debuginfo-1.0.6-2.el5_3.ppc.rpm
wireshark-gnome-1.0.6-2.el5_3.ppc.rpm

s390x:
wireshark-1.0.6-2.el5_3.s390x.rpm
wireshark-debuginfo-1.0.6-2.el5_3.s390x.rpm
wireshark-gnome-1.0.6-2.el5_3.s390x.rpm

x86_64:
wireshark-1.0.6-2.el5_3.x86_64.rpm
wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm
wireshark-gnome-1.0.6-2.el5_3.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4682
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4684
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5285
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0599
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0600
http://www.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2009 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFJrtwQXlSAg2UNWIIRAosnAJ4pcEqUE1QKvqUypMnzk/bdhR/gRgCdElAB
mk+m6B6vwDVTGmfyajjCp0U=GVWL
-----END PGP SIGNATURE-----


-- 
Enterprise-watch-list mailing list
Enterprise-watch-list@redhat.com
https://www.redhat.com/mailman/listinfo/enterprise-watch-list

RedHat: RHSA-2009-0313:01 Moderate: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5

Summary

Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal.
Multiple buffer overflow flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malformed dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. (CVE-2008-4683, CVE-2009-0599)
Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malformed dump file. (CVE-2008-4680, CVE-2008-4681, CVE-2008-4682, CVE-2008-4684, CVE-2008-4685, CVE-2008-5285, CVE-2009-0600)
Users of wireshark should upgrade to these updated packages, which contain Wireshark version 1.0.6, and resolve these issues. All running instances of Wireshark must be restarted for the update to take effect.



Summary


Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4682 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4684 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5285 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0599 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0600 http://www.redhat.com/security/updates/classification/#important

Package List

Red Hat Enterprise Linux AS version 3:
Source:
i386: wireshark-1.0.6-EL3.3.i386.rpm wireshark-debuginfo-1.0.6-EL3.3.i386.rpm wireshark-gnome-1.0.6-EL3.3.i386.rpm
ia64: wireshark-1.0.6-EL3.3.ia64.rpm wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm wireshark-gnome-1.0.6-EL3.3.ia64.rpm
ppc: wireshark-1.0.6-EL3.3.ppc.rpm wireshark-debuginfo-1.0.6-EL3.3.ppc.rpm wireshark-gnome-1.0.6-EL3.3.ppc.rpm
s390: wireshark-1.0.6-EL3.3.s390.rpm wireshark-debuginfo-1.0.6-EL3.3.s390.rpm wireshark-gnome-1.0.6-EL3.3.s390.rpm
s390x: wireshark-1.0.6-EL3.3.s390x.rpm wireshark-debuginfo-1.0.6-EL3.3.s390x.rpm wireshark-gnome-1.0.6-EL3.3.s390x.rpm
x86_64: wireshark-1.0.6-EL3.3.x86_64.rpm wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm wireshark-gnome-1.0.6-EL3.3.x86_64.rpm
Red Hat Desktop version 3:
Source:
i386: wireshark-1.0.6-EL3.3.i386.rpm wireshark-debuginfo-1.0.6-EL3.3.i386.rpm wireshark-gnome-1.0.6-EL3.3.i386.rpm
x86_64: wireshark-1.0.6-EL3.3.x86_64.rpm wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm wireshark-gnome-1.0.6-EL3.3.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
Source:
i386: wireshark-1.0.6-EL3.3.i386.rpm wireshark-debuginfo-1.0.6-EL3.3.i386.rpm wireshark-gnome-1.0.6-EL3.3.i386.rpm
ia64: wireshark-1.0.6-EL3.3.ia64.rpm wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm wireshark-gnome-1.0.6-EL3.3.ia64.rpm
x86_64: wireshark-1.0.6-EL3.3.x86_64.rpm wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm wireshark-gnome-1.0.6-EL3.3.x86_64.rpm
Red Hat Enterprise Linux WS version 3:
Source:
i386: wireshark-1.0.6-EL3.3.i386.rpm wireshark-debuginfo-1.0.6-EL3.3.i386.rpm wireshark-gnome-1.0.6-EL3.3.i386.rpm
ia64: wireshark-1.0.6-EL3.3.ia64.rpm wireshark-debuginfo-1.0.6-EL3.3.ia64.rpm wireshark-gnome-1.0.6-EL3.3.ia64.rpm
x86_64: wireshark-1.0.6-EL3.3.x86_64.rpm wireshark-debuginfo-1.0.6-EL3.3.x86_64.rpm wireshark-gnome-1.0.6-EL3.3.x86_64.rpm
Red Hat Enterprise Linux AS version 4:
Source:
i386: wireshark-1.0.6-2.el4_7.i386.rpm wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm wireshark-gnome-1.0.6-2.el4_7.i386.rpm
ia64: wireshark-1.0.6-2.el4_7.ia64.rpm wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm wireshark-gnome-1.0.6-2.el4_7.ia64.rpm
ppc: wireshark-1.0.6-2.el4_7.ppc.rpm wireshark-debuginfo-1.0.6-2.el4_7.ppc.rpm wireshark-gnome-1.0.6-2.el4_7.ppc.rpm
s390: wireshark-1.0.6-2.el4_7.s390.rpm wireshark-debuginfo-1.0.6-2.el4_7.s390.rpm wireshark-gnome-1.0.6-2.el4_7.s390.rpm
s390x: wireshark-1.0.6-2.el4_7.s390x.rpm wireshark-debuginfo-1.0.6-2.el4_7.s390x.rpm wireshark-gnome-1.0.6-2.el4_7.s390x.rpm
x86_64: wireshark-1.0.6-2.el4_7.x86_64.rpm wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
Source:
i386: wireshark-1.0.6-2.el4_7.i386.rpm wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm wireshark-gnome-1.0.6-2.el4_7.i386.rpm
x86_64: wireshark-1.0.6-2.el4_7.x86_64.rpm wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
Source:
i386: wireshark-1.0.6-2.el4_7.i386.rpm wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm wireshark-gnome-1.0.6-2.el4_7.i386.rpm
ia64: wireshark-1.0.6-2.el4_7.ia64.rpm wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm wireshark-gnome-1.0.6-2.el4_7.ia64.rpm
x86_64: wireshark-1.0.6-2.el4_7.x86_64.rpm wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
Source:
i386: wireshark-1.0.6-2.el4_7.i386.rpm wireshark-debuginfo-1.0.6-2.el4_7.i386.rpm wireshark-gnome-1.0.6-2.el4_7.i386.rpm
ia64: wireshark-1.0.6-2.el4_7.ia64.rpm wireshark-debuginfo-1.0.6-2.el4_7.ia64.rpm wireshark-gnome-1.0.6-2.el4_7.ia64.rpm
x86_64: wireshark-1.0.6-2.el4_7.x86_64.rpm wireshark-debuginfo-1.0.6-2.el4_7.x86_64.rpm wireshark-gnome-1.0.6-2.el4_7.x86_64.rpm
Red Hat Enterprise Linux Desktop (v. 5 client):
Source:
i386: wireshark-1.0.6-2.el5_3.i386.rpm wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm
x86_64: wireshark-1.0.6-2.el5_3.x86_64.rpm wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm
RHEL Desktop Workstation (v. 5 client):
Source:
i386: wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm wireshark-gnome-1.0.6-2.el5_3.i386.rpm
x86_64: wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm wireshark-gnome-1.0.6-2.el5_3.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
Source:
i386: wireshark-1.0.6-2.el5_3.i386.rpm wireshark-debuginfo-1.0.6-2.el5_3.i386.rpm wireshark-gnome-1.0.6-2.el5_3.i386.rpm
ia64: wireshark-1.0.6-2.el5_3.ia64.rpm wireshark-debuginfo-1.0.6-2.el5_3.ia64.rpm wireshark-gnome-1.0.6-2.el5_3.ia64.rpm
ppc: wireshark-1.0.6-2.el5_3.ppc.rpm wireshark-debuginfo-1.0.6-2.el5_3.ppc.rpm wireshark-gnome-1.0.6-2.el5_3.ppc.rpm
s390x: wireshark-1.0.6-2.el5_3.s390x.rpm wireshark-debuginfo-1.0.6-2.el5_3.s390x.rpm wireshark-gnome-1.0.6-2.el5_3.s390x.rpm
x86_64: wireshark-1.0.6-2.el5_3.x86_64.rpm wireshark-debuginfo-1.0.6-2.el5_3.x86_64.rpm wireshark-gnome-1.0.6-2.el5_3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package


Severity
Advisory ID: RHSA-2009:0313-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2009:0313.html
Issued Date: : 2009-03-04
CVE Names: CVE-2008-4680 CVE-2008-4681 CVE-2008-4682 CVE-2008-4683 CVE-2008-4684 CVE-2008-4685 CVE-2008-5285 CVE-2009-0599 CVE-2009-0600

Topic

Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5.This update has been rated as having moderate security impact by the RedHat Security Response Team.


Topic


 

Relevant Releases Architectures

RHEL Desktop Workstation (v. 5 client) - i386, x86_64

Red Hat Desktop version 3 - i386, x86_64

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

Red Hat Enterprise Linux Desktop version 4 - i386, x86_64

Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64


Bugs Fixed

468166 - CVE-2008-4680 wireshark: DoS (app crash or abort) via malformed USB Request Block (URB).

468167 - CVE-2008-4681 wireshark: DoS (app crash or abort) in Bluetooth RFCOMM dissector via unknown packets

468169 - CVE-2008-4682 wireshark: DoS (app abort) via a malformed .ncf file with an unknown/unexpected packet type

468171 - CVE-2008-4683 wireshark: DoS (app crash or abort) in Bluetooth ACL dissector via a packet with an invalid length

468174 - CVE-2008-4684 wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector

468175 - CVE-2008-4685 wireshark: DoS (app crash or abort) in Q.931 dissector via certain packets

472737 - CVE-2008-5285 wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request

485888 - CVE-2009-0599 wireshark: buffer overflows in NetScreen snoop file reader

485889 - CVE-2009-0600 wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file


Related News

Linux Mint 22: Elevating Security and Usability for Admins
3 - 5 min read
Linux Mint has has long been recognized as a versatile and user-friendly distribution and has earned great popularity among administrators and
Exim 4.98 Addresses Critical Vulnerabilities, Bolsters Email Server Security
2 - 4 min read
Exim is one of Unix-like systems' most widely used mail transfer agents. It's essential for email delivery and handling and is a significant part of
Recent OpenSSH RCE Bug Explained: Impact & Mitigations
2 - 4 min read
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys’
CVE-2024-4577: A Swiftly Weaponized Vulnerability for Ransomware Distribution
2 - 4 min read
Security researchers recently issued an update detailing how attackers are exploiting a PHP code execution vulnerability to spread TellYouThePass
Play Ransomware Group Unleashes New Threat on ESXi Environments: Analysis & Mitigation Strategies
3 - 5 min read
The Play ransomware group, well-known for its double-extortion tactics, recently unveiled a Linux variant targeting ESXi environments. This
Critical Linux Kernel Vulnerabilities Patched in Ubuntu Azure Systems
2 - 4 min read
Canonical has fixed several recently identified critical Linux kernel vulnerabilities in July 2024. These vulnerabilities primarily affect Microsoft
The Urgent Need for Secure Software Development: New Report Serves as a Wake-Up Call for the Industry
3 - 5 min read
The Linux Foundation and Open Source Security Foundation recently published a report entitled "Secure Software Development Education 2024
Severe Linux Kernel Privilege Escalation Bugs Could Compromise Entire Systems
2 - 4 min read
The Cybersecurity and Infrastructure Security Agency (CISA) recently added a new Linux kernel privilege escalation bug ( CVE-2024-1086 ) to its

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved