Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2021:2125-1 Important: Wireshark DoS Memory Leak Mitigation

suse
Calendar Grey June 22, 2021
Scroller Suse
An essential update for wireshark addressing vulnerabilities now available for SUSE users. Act promptly!
An update that solves 9 vulnerabilities and has two fixes is now available

Summary

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can be dissected as Wireshark (header) fields - UI improvements Including security fixes for: - CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353). - CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128) - CVE-2020-26422: QUIC dissector crash (bsc#1180232) - CVE-2020-26418: Kafka dissector memory leak (bsc#1179930) - CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931) - CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) - CVE-2020-26421: USB HID dissector crash (bsc#1179933)

Topics%20covered

Topics Covered

security advisory software update DoS memory leak SUSE wireshark patch notification

References

#1179930 #1179931 #1179932 #1179933 #1180102

#1180232 #1181598 #1181599 #1183353 #1184110

#1185128

Cross- CVE-2020-26418 CVE-2020-26419 CVE-2020-26420

CVE-2020-26421 CVE-2020-26422 CVE-2021-22173

CVE-2021-22174 CVE-2021-22191 CVE-2021-22207

CVSS scores:

CVE-2020-26418 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2020-26418 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2020-26419 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2020-26420 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2020-26420 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVE-2020-26421 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2125-1
Rating: important

Topics%20covered

Topics Covered

security advisory software update DoS memory leak SUSE wireshark patch notification

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.