Security Update for wireshark
Summary
DLA-595-1: wireshark - security update. Affects wireshark versions < 1.12.1+g01b65bf-4+deb8u6~deb7u3. Fixed in 1.12.1+g01b65bf-4+deb8u6~deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols. It allows users to capture and interactively browse the traffic running on a computer network. This vulnerability affects the Debian 7 Wheezy version of the wireshark package.
Vulnerability Detail
Multiple vulnerabilities have been discovered in various dissectors of the wireshark package, including NDS, PacketBB, WSP, MMSE, RLC, LDSS, RLC, and OpenFlow. These vulnerabilities could potentially lead to denial of service attacks or the execution of arbitrary code. The specific details of each vulnerability can be found in the related CVEs: CVE-2016-6504, CVE-2016-6505, CVE-2016-6506, CVE-2016-6507, CVE-2016-6508, CVE-2016-6509, CVE-2016-6510, and CVE-2016-6511.
How To Fix
Minimum fixed version
1.12.1+g01b65bf-4+deb8u6~deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been discovered in the wireshark package, which could lead to denial of service attacks or the execution of arbitrary code. It is crucial to upgrade to the latest version of the wireshark package to ensure the vulnerabilities are patched and the system remains secure. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is an open-source network protocol analyzer used for troubleshooting, analysis, and development of communication protocols.
These vulnerabilities could result in denial of service attacks or the execution of arbitrary code, potentially compromising the security and stability of the system.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your manifest file, such as package-lock.json, and Vulert will analyze it in real-time and alert you if any open-source vulnerabilities are found.
No specific workaround has been provided for these vulnerabilities. It is recommended to upgrade to the latest version of the wireshark package to ensure the vulnerabilities are patched.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
