The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

Multiple vulnerabilities were discovered in the dissectors/parsers for PKTC, IAX2, GSM CBCH and NCP which could result in denial of service.

This update also fixes many older less important issues by updating the package to the version found in Debian 8 also known as Jessie.

For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u1.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

wireshark was updated to 1.8.5 to fix bugs and security issues.

Vulnerabilities fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 CVE-2013-1573 CVE-2013-1574 CVE-2013-1575     CVE-2013-1576 CVE-2013-1577 CVE-2013-1578 CVE-2013-1579     CVE-2013-1580 CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02     CVE-2013-1582

  - The DTN dissector could crash wnpa-sec-2013-03     CVE-2013-1583 CVE-2013-1584

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04 CVE-2013-1585

  - The DTLS dissector could crash wnpa-sec-2013-05     CVE-2013-1586

  - The ROHC dissector could crash wnpa-sec-2013-06     CVE-2013-1587

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07 CVE-2013-1588

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08 CVE-2013-1589

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590

  + Further bug fixes and updated protocol support as listed     in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

Wireshark has been updated to 1.6.13 which fixes bugs and security issues :

The following vulnerabilities have been fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 / CVE-2013-1573 / CVE-2013-1574 /     CVE-2013-1575 / CVE-2013-1576 / CVE-2013-1577 /     CVE-2013-1578 / CVE-2013-1579 / CVE-2013-1580 /     CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02     CVE-2013-1582

  - The DTN dissector could crash wnpa-sec-2013-03     CVE-2013-1583 / CVE-2013-1584

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04 CVE-2013-1585

  - The DTLS dissector could crash wnpa-sec-2013-05     CVE-2013-1586

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07 CVE-2013-1588: * The Wireshark     dissection engine could crash wnpa-sec-2013-08     CVE-2013-1589: * The NTLMSSP dissector could overflow a     buffer wnpa-sec-2013-09 CVE-2013-1590: Further bug fixes     and updated protocol support as listed in :

http://www.wireshark.org/docs/relnotes/wireshark-1.6.13.html

wireshark was updated to 1.8.5 (bnc#801131), fixing bugs and security issues :

The following vulnerabilities have been fixed :

  - Infinite and large loops in the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01     CVE-2013-1572 / CVE-2013-1573 / CVE-2013-1574 /     CVE-2013-1575 / CVE-2013-1576 / CVE-2013-1577 /     CVE-2013-1578 / CVE-2013-1579 / CVE-2013-1580 /     CVE-2013-1581

  - The CLNP dissector could crash wnpa-sec-2013-02.
    (CVE-2013-1582)

  - The DTN dissector could crash wnpa-sec-2013-03.
    (CVE-2013-1583 / CVE-2013-1584)

  - The MS-MMC dissector (and possibly others) could crash     wnpa-sec-2013-04. (CVE-2013-1585)

  - The DTLS dissector could crash wnpa-sec-2013-05.
    (CVE-2013-1586)

  - The ROHC dissector could crash wnpa-sec-2013-06.
    (CVE-2013-1587)

  - The DCP-ETSI dissector could corrupt memory     wnpa-sec-2013-07. (CVE-2013-1588)

  - The Wireshark dissection engine could crash     wnpa-sec-2013-08. (CVE-2013-1589)

  - The NTLMSSP dissector could overflow a buffer     wnpa-sec-2013-09 CVE-2013-1590: Further bug fixes and     updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.h     tml

The installed version of Wireshark 1.8 is earlier than 1.8.5.  It is, therefore, affected by the following vulnerabilities :

  - Errors exist related to the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors that could     allow the application to enter infinite or large loops,     thereby consuming excessive CPU resources. (Bugs 8036,     8037, 8038, 8040, 8041, 8042, 8043, 8198, 8199, 8222)

  - Errors exist related to the DCP-ETSI, ROHC, DTLS,     MS-MMC, DTN, CLNP dissectors that could allow them to     crash. (Bugs 7679, 7871, 7945, 8111, 8112, 8213)

  - An unspecified error could allow the dissection engine     to crash. (Bug 8197)

  - An unspecified buffer overflow exists in the NTLMSSP     dissector that has an unspecified impact.

The installed version of Wireshark 1.6 is earlier than 1.6.13.  It is, therefore, affected by the following vulnerabilities :

  - Errors exist related to the Bluetooth HCI, CSN.1,     DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols,     MPLS, R3, RTPS, SDP, and SIP dissectors that could     allow the application to enter infinite or large loops,     thereby consuming excessive CPU resources. (Bugs 8036,     8037, 8038, 8040, 8041, 8042, 8043, 8198, 8199, 8222)

  - Errors exist related to the DCP-ETSI, DTLS, MS-MMC, DTN,     CLNP dissectors that could allow them to crash.
    (Bugs 7871, 7945, 8111, 8112, 8213)

  - An unspecified error could allow the dissection engine     to crash. (Bug 8197)

  - An unspecified buffer overflow exists in the NTLMSSP     dissector that has an unspecified impact.

ID	Name	Product	Family	Severity
91395	Debian DLA-497-1 : wireshark security update	Nessus	Debian Local Security Checks	medium
74879	openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)	Nessus	SuSE Local Security Checks	low
64797	SuSE 10 Security Update : wireshark (ZYPP Patch Number 8467)	Nessus	SuSE Local Security Checks	low
64796	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	low
64795	SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)	Nessus	SuSE Local Security Checks	low
64362	Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities	Nessus	Windows	low
64361	Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities	Nessus	Windows	low

Detections

Analytics

CVE-2013-1578

high

Tenable Plugins

medium

low

low

low

low

low

low