SUSE-SU-2016:2453-1

Source
https://www.suse.com/support/update/announcement/2016/suse-su-20162453-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2453-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2016:2453-1
Related
Published
2016-10-04T15:57:05Z
Modified
2016-10-04T15:57:05Z
Summary
Security update for wireshark
Details

wireshark was updated to version 1.12.13 to fix the following issues:

  • CVE-2016-6504: wireshark: NDS dissector crash (bnc#991012)
  • CVE-2016-6505: wireshark: PacketBB dissector could divide by zero (bnc#991013)
  • CVE-2016-6506: wireshark: WSP infinite loop (bnc#991015)
  • CVE-2016-6507: wireshark: MMSE infinite loop (bnc#991016)
  • CVE-2016-6508: wireshark: RLC long loop (bnc#991017)
  • CVE-2016-6509: wireshark: LDSS dissector crash (bnc#991018)
  • CVE-2016-6510: wireshark: RLC dissector crash (bnc#991019)
  • CVE-2016-6511: wireshark: OpenFlow long loop (bnc991020)

  • CVE-2016-5350: SPOOLS infinite loop (bsc#983671).

  • CVE-2016-5351: IEEE 802.11 dissector crash (bsc#983671).
  • CVE-2016-5352: IEEE 802.11 dissector crash, different from wpna-sec-2016-30 (bsc#983671).
  • CVE-2016-5353: UMTS FP crash (bsc#983671).
  • CVE-2016-5354: USB dissector crash (bsc#983671).
  • CVE-2016-5355: Toshiba file parser crash (bsc#983671).
  • CVE-2016-5356: CoSine file parser crash (bsc#983671).
  • CVE-2016-5357: NetScreen file parser crash (bsc#983671).
  • CVE-2016-5358: Ethernet dissector crash (bsc#983671).
  • CVE-2016-5359: WBXML infinite loop (bsc#983671).

For more details please see: https://www.wireshark.org/docs/relnotes/wireshark-1.12.12.html https://www.wireshark.org/docs/relnotes/wireshark-1.12.13.html

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 / wireshark

Package

Name
wireshark
Purl
purl:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.12.13-31.1

Ecosystem specific

{
    "binaries": [
        {
            "wireshark": "1.12.13-31.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP1 / wireshark

Package

Name
wireshark
Purl
purl:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.12.13-31.1

Ecosystem specific

{
    "binaries": [
        {
            "wireshark-devel": "1.12.13-31.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1 / wireshark

Package

Name
wireshark
Purl
purl:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.12.13-31.1

Ecosystem specific

{
    "binaries": [
        {
            "wireshark": "1.12.13-31.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / wireshark

Package

Name
wireshark
Purl
purl:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.12.13-31.1

Ecosystem specific

{
    "binaries": [
        {
            "wireshark": "1.12.13-31.1"
        }
    ]
}