Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Red Hat Enterprise Linux 6 RHSA-2017:0631-01 Moderate DoS Fix for Wireshark

red hat
Calendar Grey March 21, 2017
Scroller Redhat
Important patch update for Wireshark boosts data monitoring capabilities on Red Hat Enterprise Linux 6. Make sure to install this upgrade.
An update for wireshark is now available for Red Hat Enterprise Linux 6

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Wireshark must be restarted for the update to take effect.

Summary

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2015-3811, CVE-2015-3812, CVE-2015-3813, CVE-2013-4075)
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory Red Hat update bug fix DoS network analyzer wireshark

References

https://access.redhat.com/security/cve/CVE-2013-4075 https://access.redhat.com/security/cve/CVE-2015-3811 https://access.redhat.com/security/cve/CVE-2015-3812 https://access.redhat.com/security/cve/CVE-2015-3813 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Release_Notes/index.html https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.9_Technical_Notes/index.html

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source: wireshark-1.8.10-25.el6.src.rpm
i386: wireshark-1.8.10-25.el6.i686.rpm wireshark-debuginfo-1.8.10-25.el6.i686.rpm wireshark-gnome-1.8.10-25.el6.i686.rpm
x86_64: wireshark-1.8.10-25.el6.i686.rpm wireshark-1.8.10-25.el6.x86_64.rpm wireshark-debuginfo-1.8.10-25.el6.i686.rpm wireshark-debuginfo-1.8.10-25.el6.x86_64.rpm wireshark-gnome-1.8.10-25.el6.x86_64.rpm
Red Hat Enterprise Linux Desktop Optional (v. 6):
i386: wireshark-debuginfo-1.8.10-25.el6.i686.rpm wireshark-devel-1.8.10-25.el6.i686.rpm
x86_64: wireshark-debuginfo-1.8.10-25.el6.i686.rpm wireshark-debuginfo-1.8.10-25.el6.x86_64.rpm wireshark-devel-1.8.10-25.el6.i686.rpm wireshark-devel-1.8.10-25.el6.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: wireshark-1.8.10-25.el6.src.rpm
i386: wireshark-1.8.10-25.el6.i686.rpm wireshark-debuginfo-1.8.10-25.el6.i686.rpm wireshark-gnome-1.8.10-25.el6.i686.rpm
ppc64: wireshark-1.8.10-25.el6.ppc.rpm wireshark-1.8.10-25.el6.ppc64.rpm wireshark-debuginfo-1.8.10-25.el6.ppc.rpm wireshark-debuginfo-1.8.10-25.el6.ppc64.rpm wireshark-gnome-1.8.10-25.el6.ppc64.rpm
s390x: wireshark-1.8.10-25.el6.s390.rpm wireshark-1.8.10-25.el6.s390x.rpm wireshark-debuginfo-1.8.10-25.el6.s390.rpm wireshark-debuginfo-1.8.10-25.el6.s390x.rpm

Read the Full Advisory


Advisory ID: RHSA-2017:0631-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2017:0631.html
Issue date: 2017-03-21

Topic

An update for wireshark is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat update bug fix DoS network analyzer wireshark

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64

Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64

Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

Bugs Fixed

972680 - CVE-2013-4075 wireshark: DoS (crash) in the GMR-1 BCCH dissector (wnpa-sec-2013-33)

1222436 - CVE-2015-3811 wireshark: WCP dissector crash (wnpa-sec-2015-14)

1222437 - CVE-2015-3812 wireshark: X11 memory leak (wnpa-sec-2015-15)

1222438 - CVE-2015-3813 wireshark: Reassembly memory leak (wnpa-sec-2015-16)

1222895 - Problems decoding TLS Server Key Exchange messages

1222902 - Encrypt-then-MAC TLS extension unrecognised

1238166 - tshark -F option fails to create capture files in .pcap format.

1240675 - No dissection of the TLS Certificate Verify message

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.