In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs.

It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code.

Several issues that could result in a crash within different dissectors have been fixed. Other issues are related to memory leaks or heap-based buffer overflows.

All issue could be caused by special crafted and malformed packets.

For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u11.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark fixes the following issues :

  - Update to wireshark 2.2.14, fix such issues :

  - bsc#1088200 VUL-0: wireshark: multiple vulnerabilities     fixed in 2.2.14, 2.4.6

  - CVE-2018-9256: LWAPP dissector crash

  - CVE-2018-9260: IEEE 802.15.4 dissector crash

  - CVE-2018-9261: NBAP dissector crash

  - CVE-2018-9262: VLAN dissector crash

  - CVE-2018-9263: Kerberos dissector crash

  - CVE-2018-9264: ADB dissector crash

  - CVE-2018-9265: tn3270 dissector has a memory leak

  - CVE-2018-9266: ISUP dissector memory leak

  - CVE-2018-9267: LAPD dissector memory leak

  - CVE-2018-9268: SMB2 dissector memory leak

  - CVE-2018-9269: GIOP dissector memory leak

  - CVE-2018-9270: OIDS dissector memory leak

  - CVE-2018-9271: multipart dissector memory leak

  - CVE-2018-9272: h223 dissector memory leak

  - CVE-2018-9273: pcp dissector memory leak

  - CVE-2018-9274: failure message memory leak

  - CVE-2018-9259: MP4 dissector crash

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark fixes the following issues :

Minor vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (boo#1088200) :

  - CVE-2018-9264: ADB dissector crash 

  - CVE-2018-9260: IEEE 802.15.4 dissector crash 

  - CVE-2018-9261: NBAP dissector crash 

  - CVE-2018-9262: VLAN dissector crash

  - CVE-2018-9256: LWAPP dissector crash

  - CVE-2018-9263: Kerberos dissector crash

  - CVE-2018-9259: MP4 dissector crash

  - Memory leaks in multiple dissectors: CVE-2018-9265,     CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,     CVE-2018-9269, CVE-2018-9270, CVE-2018-9271,     CVE-2018-9272, CVE-2018-9273, CVE-2018-9274

This update also contains all upstream bug fixes and updated protocol support as listed in :

https://www.wireshark.org/docs/relnotes/wireshark-2.2.14.html

The version of Wireshark installed on the remote Windows host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

The version of Wireshark installed on the remote MacOS/MacOSX host is 2.2.x prior to 2.2.14 or 2.4.x prior to 2.4.6. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
110318	Debian DSA-4217-1 : wireshark - security update	Nessus	Debian Local Security Checks	high
110164	Debian DLA-1388-1 : wireshark security update	Nessus	Debian Local Security Checks	high
109198	SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)	Nessus	SuSE Local Security Checks	high
109197	SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0980-1)	Nessus	SuSE Local Security Checks	high
108937	openSUSE Security Update : wireshark (openSUSE-2018-347)	Nessus	SuSE Local Security Checks	high
108885	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities	Nessus	Windows	high
108884	Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities (MacOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-9261

high

Tenable Plugins

high

high

high

high

high

high

high