Ubuntu 16.04, 18.04, 19.04 LTS: USN-4133-1 Moderate: Wireshark Crash

ubuntu

September 16, 2019

Wireshark could be made to crash if it received specially crafted network traffic or input files.

Summary

Wireshark could be made to crash if it received specially crafted network

traffic or input files.

Software Description:

- wireshark: network traffic analyzer

Details:

It was discovered that Wireshark improperly handled certain input. A remote or

local attacker could cause Wireshark to crash by injecting malformed packets

onto the wire or convincing someone to read a malformed packet trace file.

Topics Covered

security advisory remote attack network analyzer ubuntu crash issue input handling wireshark

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libwireshark-data               2.6.10-1~ubuntu19.04.0
  libwireshark11                  2.6.10-1~ubuntu19.04.0
  libwiretap8                     2.6.10-1~ubuntu19.04.0
  libwscodecs2                    2.6.10-1~ubuntu19.04.0
  libwsutil9                      2.6.10-1~ubuntu19.04.0
  tshark                          2.6.10-1~ubuntu19.04.0
  wireshark                       2.6.10-1~ubuntu19.04.0
  wireshark-common                2.6.10-1~ubuntu19.04.0
  wireshark-gtk                   2.6.10-1~ubuntu19.04.0
  wireshark-qt                    2.6.10-1~ubuntu19.04.0

Ubuntu 18.04 LTS:
  libwireshark-data               2.6.10-1~ubuntu18.04.0
  libwireshark11                  2.6.10-1~ubuntu18.04.0
  libwiretap8                     2.6.10-1~ubuntu18.04.0
  libwscodecs2                    2.6.10-1~ubuntu18.04.0
  libwsutil9                      2.6.10-1~ubuntu18.04.0
  tshark                          2.6.10-1~ubuntu18.04.0
  wireshark                       2.6.10-1~ubuntu18.04.0
  wireshark-common                2.6.10-1~ubuntu18.04.0
  wireshark-gtk                   2.6.10-1~ubuntu18.04.0
  wireshark-qt                    2.6.10-1~ubuntu18.04.0

Ubuntu 16.04 LTS:
  libwireshark-data               2.6.10-1~ubuntu16.04.0
  libwireshark11                  2.6.10-1~ubuntu16.04.0
  libwiretap8                     2.6.10-1~ubuntu16.04.0
  libwscodecs2                    2.6.10-1~ubuntu16.04.0
  libwsutil9                      2.6.10-1~ubuntu16.04.0
  tshark                          2.6.10-1~ubuntu16.04.0
  wireshark                       2.6.10-1~ubuntu16.04.0
  wireshark-common                2.6.10-1~ubuntu16.04.0
  wireshark-gtk                   2.6.10-1~ubuntu16.04.0
  wireshark-qt                    2.6.10-1~ubuntu16.04.0

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.