Wireshark - Multiple Vulnerabilities
Summary
DLA-497-1: wireshark - security update. Affects wireshark versions < 1.12.1+g01b65bf-4+deb8u6~deb7u1. Fixed in 1.12.1+g01b65bf-4+deb8u6~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols. It allows users to capture and examine network traffic in real-time. The Wireshark package in Debian 7 Wheezy is vulnerable to multiple security issues.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the dissectors/parsers for PKTC, IAX2, GSM CBCH, and NCP in Wireshark. These vulnerabilities could potentially lead to denial of service attacks. Additionally, this update addresses various older, less significant issues by updating the package to the version found in Debian 8 (Jessie).
How To Fix
Minimum fixed version
1.12.1+g01b65bf-4+deb8u6~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been discovered in the Wireshark package for Debian 7 Wheezy. It is crucial to upgrade to the recommended version to mitigate the risk of denial of service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is an open-source network protocol analyzer used for capturing and analyzing network traffic.
The vulnerabilities addressed in this update are related to the dissectors/parsers for PKTC, IAX2, GSM CBCH, and NCP, which could result in denial of service attacks.
These vulnerabilities could potentially allow an attacker to cause a denial of service, disrupting network communication.
To fix these vulnerabilities, you should upgrade your wireshark packages to version 1.12.1+g01b65bf-4+deb8u6~deb7u1 or later.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
