wireshark-1.0.15-1.1.0.1.AXS3

エラータID: AXSA:2010-417:02

Release date: 
Tuesday, August 17, 2010 - 20:48
Subject: 
wireshark-1.0.15-1.1.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package.
Security issues fixed with this release:
CVE-2010-1455
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
CVE-2010-2283
The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
CVE-2010-2284
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVE-2010-2286
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVE-2010-2287
Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVE-2010-2995
The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, a different vulnerability than CVE-2010-2287.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. wireshark-1.0.15-1.1.0.1.AXS3.src.rpm
    MD5: 8c992209f4ab10a6b23a2e7d10195be2
    SHA-256: 502bd6f7ac6b42b2c3d8b418090bb599251848ac540aab2e8e48773bc1ad74d8
    Size: 12.80 MB

Asianux Server 3 for x86
  1. wireshark-1.0.15-1.1.0.1.AXS3.i386.rpm
    MD5: 98237848634aad7014ae040277248d6f
    SHA-256: 1f88e08eafed074219ff3a26a0b7bd2dcd0b86a49b9392817bacab7f4ba01255
    Size: 10.58 MB
  2. wireshark-gnome-1.0.15-1.1.0.1.AXS3.i386.rpm
    MD5: 8f1533b9e2c4f1dd29516d7c7ec3da05
    SHA-256: 451d7261b1d359ce6eaadf43ef3da08ef067d49ccfd9c7f6032d39807e2e6eb0
    Size: 671.32 kB

Asianux Server 3 for x86_64
  1. wireshark-1.0.15-1.1.0.1.AXS3.x86_64.rpm
    MD5: 4a3d19d8dfdd257aadfc0383d92532c0
    SHA-256: 095d00e7561edc6634df5a5542eef7aae5f910aac2278143cf24d97017890b3e
    Size: 11.88 MB
  2. wireshark-gnome-1.0.15-1.1.0.1.AXS3.x86_64.rpm
    MD5: 4100d001e518b83aac2341318ac2ac4b
    SHA-256: 385bd14113a7856ad379fa79f0afd25f6d6f9315dc81615a95c05bf60b450ec7
    Size: 697.96 kB