SUSE-SU-2018:1988-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2018/suse-su-20181988-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1988-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2018:1988-1
Related
Published
2018-07-19T07:32:17Z
Modified
2018-07-19T07:32:17Z
Summary
Security update for wireshark
Details

This update for wireshark fixes vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (bsc#1094301).

This includes:

  • CVE-2018-11356: DNS dissector crash
  • CVE-2018-11357: Multiple dissectors could consume excessive memory
  • CVE-2018-11358: Q.931 dissector crash
  • CVE-2018-11359: The RRC dissector and other dissectors could crash
  • CVE-2018-11360: GSM A DTAP dissector crash
  • CVE-2018-11362: LDSS dissector crash
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 / wireshark

Package

Name
wireshark
Purl
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.7-3.3.4

Ecosystem specific 

{
    "binaries": [
        {
            "libwireshark9": "2.4.7-3.3.4",
            "libwscodecs1": "2.4.7-3.3.4",
            "wireshark": "2.4.7-3.3.4",
            "libwiretap7": "2.4.7-3.3.4",
            "libwsutil8": "2.4.7-3.3.4"
        }
    ]
}

SUSE:Linux Enterprise Module for Desktop Applications 15 / wireshark

Package

Name
wireshark
Purl
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.7-3.3.4

Ecosystem specific 

{
    "binaries": [
        {
            "wireshark-devel": "2.4.7-3.3.4",
            "wireshark-ui-qt": "2.4.7-3.3.4"
        }
    ]
}