ALT-BU-2019-3601-1
Branch sisyphus update bulletin.
Closed vulnerabilities
BDU:2020-02569
Уязвимость функции disct_gssapi_work (packet-gssapi.c) анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02570
Уязвимость модуля NetScaler (Netscaler.c) анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02571
Уязвимость компонента DOF Dissector анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02572
Уязвимость службы Service Location Protocol анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02573
Уязвимость службы Local Download Sharing Service анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02574
Уязвимость в диссекторе протокола Microsoft Spool Subsystem анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02714
Уязвимость компонента epan/dissectors/packet-ieee80211.c анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02715
Уязвимость диссектора GSUP анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2020-02716
Уязвимость диссектора TSDNS анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-01496
Уязвимость компонента Rbm dissector анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2019-10894
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15613
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b20e5d8aae2580e29c83ddaf0b6b2e640603e4aa
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-14.html
- https://www.wireshark.org/security/wnpa-sec-2019-14.html
Modified: 2024-11-21
CVE-2019-10895
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15497
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2fbbde780e5d5d82e31dca656217daf278cf62bb
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=38680c4c69f9f4e0f39e29b66fe2b02d88eb629d
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cab0cff6abdd7a5b5b0bfa4ee204eea951e129e9
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-09.html
- https://www.wireshark.org/security/wnpa-sec-2019-09.html
Modified: 2024-11-21
CVE-2019-10896
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=441b6d9071d6341e58dfe10719375489c5b8e3f0
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-15.html
- https://www.wireshark.org/security/wnpa-sec-2019-15.html
Modified: 2024-11-21
CVE-2019-10897
In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in which the bit offset does not advance.
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107836
- 107836
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- https://www.wireshark.org/security/wnpa-sec-2019-11.html
- https://www.wireshark.org/security/wnpa-sec-2019-11.html
Modified: 2024-11-21
CVE-2019-10898
In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Information Element length.
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107836
- 107836
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f80b7d1b279fb6c13f640019a1bbc42b18bf7469
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- https://www.wireshark.org/security/wnpa-sec-2019-12.html
- https://www.wireshark.org/security/wnpa-sec-2019-12.html
Modified: 2024-11-21
CVE-2019-10899
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15546
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b16fea2f175a3297edac118c8844c7987d31c1cb
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-10.html
- https://www.wireshark.org/security/wnpa-sec-2019-10.html
Modified: 2024-11-21
CVE-2019-10900
In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely.
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107836
- 107836
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=26eee01f57f0a86fb375892c7937eac24ede4610
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- https://www.wireshark.org/security/wnpa-sec-2019-13.html
- https://www.wireshark.org/security/wnpa-sec-2019-13.html
Modified: 2024-11-21
CVE-2019-10901
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15620
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cf801a25074f76dc3ae62d8ec53ace75f56ce2cd
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-17.html
- https://www.wireshark.org/security/wnpa-sec-2019-17.html
Modified: 2024-11-21
CVE-2019-10902
In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107836
- 107836
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=95571f17d5e2de39735e62e5251583f930c06d51
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- https://www.wireshark.org/security/wnpa-sec-2019-16.html
- https://www.wireshark.org/security/wnpa-sec-2019-16.html
Modified: 2024-11-21
CVE-2019-10903
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1356
- openSUSE-SU-2019:1390
- openSUSE-SU-2019:1390
- openSUSE-SU-2020:0362
- openSUSE-SU-2020:0362
- 107834
- 107834
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15568
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=eafdcfa4b6d5187a5326442a82608ab03d9dddcb
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20190525 [SECURITY] [DLA 1802-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2423-1] wireshark security update
- FEDORA-2019-77b2d840ef
- FEDORA-2019-77b2d840ef
- FEDORA-2019-aef1dac6a0
- FEDORA-2019-aef1dac6a0
- USN-3986-1
- USN-3986-1
- https://www.wireshark.org/security/wnpa-sec-2019-18.html
- https://www.wireshark.org/security/wnpa-sec-2019-18.html