RHEL 5 : wireshark (RHSA-2014:0341)

high Nessus Plugin ID 73281

Synopsis

The remote Red Hat host is missing one or more security updates for wireshark.

Description

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0341 advisory.

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network.

Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2013-3559, CVE-2013-4083, CVE-2014-2281, CVE-2014-2299)

Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file. (CVE-2012-5595, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-4081, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112)

All Wireshark users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of Wireshark must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL wireshark package based on the guidance in RHSA-2014:0341.

See Also

http://www.nessus.org/u?d74af69f

https://access.redhat.com/errata/RHSA-2014:0341

https://access.redhat.com/security/updates/classification/#moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1007197

https://bugzilla.redhat.com/show_bug.cgi?id=1044508

https://bugzilla.redhat.com/show_bug.cgi?id=1074109

https://bugzilla.redhat.com/show_bug.cgi?id=1074114

https://bugzilla.redhat.com/show_bug.cgi?id=881742

https://bugzilla.redhat.com/show_bug.cgi?id=881748

https://bugzilla.redhat.com/show_bug.cgi?id=881771

https://bugzilla.redhat.com/show_bug.cgi?id=881809

https://bugzilla.redhat.com/show_bug.cgi?id=965190

https://bugzilla.redhat.com/show_bug.cgi?id=965193

https://bugzilla.redhat.com/show_bug.cgi?id=972686

https://bugzilla.redhat.com/show_bug.cgi?id=972688

https://bugzilla.redhat.com/show_bug.cgi?id=990166

https://bugzilla.redhat.com/show_bug.cgi?id=990170

https://bugzilla.redhat.com/show_bug.cgi?id=990172

https://bugzilla.redhat.com/show_bug.cgi?id=990175

https://bugzilla.redhat.com/show_bug.cgi?id=990178

https://bugzilla.redhat.com/show_bug.cgi?id=990179

Plugin Details

Severity: High

ID: 73281

File Name: redhat-RHSA-2014-0341.nasl

Version: 1.25

Type: local

Agent: unix

Published: 4/1/2014

Updated: 3/20/2025

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

Vendor

Vendor Severity: Moderate

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2014-2299

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 7.2

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:wireshark-gnome, p-cpe:/a:redhat:enterprise_linux:wireshark, cpe:/o:redhat:enterprise_linux:5

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/31/2014

Reference Information

CVE: CVE-2012-5595, CVE-2012-5598, CVE-2012-5599, CVE-2012-5600, CVE-2012-6056, CVE-2012-6060, CVE-2012-6061, CVE-2012-6062, CVE-2013-3557, CVE-2013-3559, CVE-2013-4081, CVE-2013-4083, CVE-2013-4927, CVE-2013-4931, CVE-2013-4932, CVE-2013-4933, CVE-2013-4934, CVE-2013-4935, CVE-2013-5721, CVE-2013-7112, CVE-2014-2281, CVE-2014-2299

BID: 56729, 59995, 60021, 60504, 60505, 61471, 62320, 62868, 64411, 66066, 66068

CWE: 119, 835

RHSA: 2014:0341