wireshark-1.0.15-1.1.0.1.AXS3
エラータID: AXSA:2010-417:02
This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package.
Security issues fixed with this release:
CVE-2010-1455
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
CVE-2010-2283
The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
CVE-2010-2284
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVE-2010-2286
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVE-2010-2287
Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
CVE-2010-2995
The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, a different vulnerability than CVE-2010-2287.
Update packages.
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.
N/A
SRPMS
- wireshark-1.0.15-1.1.0.1.AXS3.src.rpm
MD5: 8c992209f4ab10a6b23a2e7d10195be2
SHA-256: 502bd6f7ac6b42b2c3d8b418090bb599251848ac540aab2e8e48773bc1ad74d8
Size: 12.80 MB
Asianux Server 3 for x86
- wireshark-1.0.15-1.1.0.1.AXS3.i386.rpm
MD5: 98237848634aad7014ae040277248d6f
SHA-256: 1f88e08eafed074219ff3a26a0b7bd2dcd0b86a49b9392817bacab7f4ba01255
Size: 10.58 MB - wireshark-gnome-1.0.15-1.1.0.1.AXS3.i386.rpm
MD5: 8f1533b9e2c4f1dd29516d7c7ec3da05
SHA-256: 451d7261b1d359ce6eaadf43ef3da08ef067d49ccfd9c7f6032d39807e2e6eb0
Size: 671.32 kB
Asianux Server 3 for x86_64
- wireshark-1.0.15-1.1.0.1.AXS3.x86_64.rpm
MD5: 4a3d19d8dfdd257aadfc0383d92532c0
SHA-256: 095d00e7561edc6634df5a5542eef7aae5f910aac2278143cf24d97017890b3e
Size: 11.88 MB - wireshark-gnome-1.0.15-1.1.0.1.AXS3.x86_64.rpm
MD5: 4100d001e518b83aac2341318ac2ac4b
SHA-256: 385bd14113a7856ad379fa79f0afd25f6d6f9315dc81615a95c05bf60b450ec7
Size: 697.96 kB