Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code

(CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995, CVE-2010-3445, CVE-2010-4300, CVE-2010-4301)

The remote host is affected by the vulnerability described in GLSA-201110-02 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send specially crafted packets on a network       being monitored by Wireshark, entice a user to open a malformed packet       trace file using Wireshark, or deploy a specially crafted Lua script for       use by Wireshark, possibly resulting in the execution of arbitrary code,       or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Wireshark was updated to version 1.4.4 to fix several security issues

Update to upstream version 1.2.10: * http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html * http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html fixing multiple security issues: * http://www.wireshark.org/security/wnpa-sec-2010-06.html * http://www.wireshark.org/security/wnpa-sec-2010-08.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. 

  - The SigComp Universal Decompressor Virtual Machine could     potentially overflow a buffer. (Bug 4867)

  - The ANS.1 BER dissector could potentially exhaust the     stack memory. (Bug 4984)

  - The GSM A RR dissector is affected by denial of service     issue. (Bug 4897)

  - The IPMI dissector could get stuck in an infinite loop.     (Bug 5053)

Wireshark was updated to version 1.4.4 to fix several security issues.

Update to upstream version 1.2.10: * http://www.wireshark.org/docs/relnotes/wireshark-1.2.7.html * http://www.wireshark.org/docs/relnotes/wireshark-1.2.8.html * http://www.wireshark.org/docs/relnotes/wireshark-1.2.9.html * http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.html fixing multiple security issues: * http://www.wireshark.org/security/wnpa-sec-2010-04.html * http://www.wireshark.org/security/wnpa-sec-2010-06.html * http://www.wireshark.org/security/wnpa-sec-2010-08.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
75771	openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	critical
53808	openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	critical
56426	GLSA-201110-02 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	10/10/2011	1/6/2021	critical
53315	SuSE 11.1 Security Update : wireshark (SAT Patch Number 4267)	Nessus	SuSE Local Security Checks	4/7/2011	1/19/2021	critical
49092	Fedora 13 : wireshark-1.2.10-1.fc13 (2010-13416)	Nessus	Fedora Local Security Checks	9/3/2010	1/11/2021	critical
48213	Wireshark / Ethereal < 1.0.15 / 1.2.10 Multiple Vulnerabilities	Nessus	Windows	8/2/2010	3/9/2023	high
57261	SuSE 10 Security Update : wireshark (ZYPP Patch Number 7438)	Nessus	SuSE Local Security Checks	12/13/2011	1/19/2021	critical
53319	SuSE 10 Security Update : wireshark (ZYPP Patch Number 7439)	Nessus	SuSE Local Security Checks	4/7/2011	1/19/2021	critical
49093	Fedora 12 : wireshark-1.2.10-1.fc12 (2010-13427)	Nessus	Fedora Local Security Checks	9/3/2010	1/11/2021	critical
53689	openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-1)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

high

critical

critical

critical

critical