The dissectzclpwrprofpwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwireshark-data" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwireshark11" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwireshark11-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwiretap-dev" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwiretap8" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwiretap8-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwscodecs2" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwscodecs2-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwsutil-dev" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwsutil9" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "libwsutil9-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "tshark" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "tshark-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-common" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-common-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-doc" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-gtk" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-gtk-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-qt" }, { "binary_version": "2.6.3-1~ubuntu14.04.1", "binary_name": "wireshark-qt-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwireshark-data" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwireshark11" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwireshark11-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwiretap-dev" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwiretap8" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwiretap8-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwscodecs2" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwscodecs2-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwsutil-dev" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwsutil9" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "libwsutil9-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "tshark" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "tshark-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-common" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-common-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-doc" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-gtk" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-gtk-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-qt" }, { "binary_version": "2.6.3-1~ubuntu16.04.1", "binary_name": "wireshark-qt-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwireshark-data" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwireshark11" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwireshark11-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwiretap-dev" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwiretap8" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwiretap8-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwscodecs2" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwscodecs2-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwsutil-dev" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwsutil9" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "libwsutil9-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "tshark" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "tshark-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-common" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-common-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-dev" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-doc" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-gtk" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-gtk-dbgsym" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-qt" }, { "binary_version": "2.6.3-1~ubuntu18.04.1", "binary_name": "wireshark-qt-dbgsym" } ] }