Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:26695
HistoryJul 26, 2011 - 12:00 a.m.

[ MDVSA-2011:118 ] wireshark

2011-07-2600:00:00
vulners.com
10

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Mandriva Linux Security Advisory MDVSA-2011:118
http://www.mandriva.com/security/


Package : wireshark
Date : July 24, 2011
Affected: 2010.1, Enterprise Server 5.0


Problem Description:

This advisory updates wireshark to the latest version (1.2.18),
fixing one security issue:

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x
through 1.4.7, and 1.6.0 allows remote attackers to cause a denial
of service (infinite loop) via malformed packets (CVE-2011-2597).


References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2597


Updated Packages:

Mandriva Linux 2010.1:
7fb6752f1517d3426c8e67faef4f1623 2010.1/i586/dumpcap-1.2.18-0.1mdv2010.2.i586.rpm
6e055e82fb8a73438daef069e9c3dcac 2010.1/i586/libwireshark0-1.2.18-0.1mdv2010.2.i586.rpm
77932054f0e4e64a3fe98cf306e90038 2010.1/i586/libwireshark-devel-1.2.18-0.1mdv2010.2.i586.rpm
9ac66f1b5d532c50a6f78fe3dc90b098 2010.1/i586/rawshark-1.2.18-0.1mdv2010.2.i586.rpm
7b1f661d582b942b3bed8929676386a2 2010.1/i586/tshark-1.2.18-0.1mdv2010.2.i586.rpm
d633a42a1171fa6a734f9f588920b939 2010.1/i586/wireshark-1.2.18-0.1mdv2010.2.i586.rpm
b4123d0e7032ae4b12a122204c619d8e 2010.1/i586/wireshark-tools-1.2.18-0.1mdv2010.2.i586.rpm
d862c9f382eb1693b1589e6543297938 2010.1/SRPMS/wireshark-1.2.18-0.1mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
8cd85afdc5223ef667316ac4254b1d98 2010.1/x86_64/dumpcap-1.2.18-0.1mdv2010.2.x86_64.rpm
0727c0c16f2b77419e9cd4d3bbd04ba4 2010.1/x86_64/lib64wireshark0-1.2.18-0.1mdv2010.2.x86_64.rpm
be09db366d6b23eb0ee472f05d5fe810
2010.1/x86_64/lib64wireshark-devel-1.2.18-0.1mdv2010.2.x86_64.rpm
29f3dff24e4a9c53b5fb7f76c7e649e1 2010.1/x86_64/rawshark-1.2.18-0.1mdv2010.2.x86_64.rpm
e1a51e702af139732a327bb0a1c8b395 2010.1/x86_64/tshark-1.2.18-0.1mdv2010.2.x86_64.rpm
21714c62c8fa3ad1c17699d56b3b95a5 2010.1/x86_64/wireshark-1.2.18-0.1mdv2010.2.x86_64.rpm
993b09572810f185fa25a56506718aaa
2010.1/x86_64/wireshark-tools-1.2.18-0.1mdv2010.2.x86_64.rpm
d862c9f382eb1693b1589e6543297938 2010.1/SRPMS/wireshark-1.2.18-0.1mdv2010.2.src.rpm

Mandriva Enterprise Server 5:
5cb2ac267f9101e046e69d49c03ce577 mes5/i586/dumpcap-1.2.18-0.1mdvmes5.2.i586.rpm
b4f04f308de4fe56e0b59e64f99df892 mes5/i586/libwireshark0-1.2.18-0.1mdvmes5.2.i586.rpm
d4e1d95d1f41a3785a585594fbe7d1c5 mes5/i586/libwireshark-devel-1.2.18-0.1mdvmes5.2.i586.rpm
26dcdf086372ec98f2755e7b20005b70 mes5/i586/rawshark-1.2.18-0.1mdvmes5.2.i586.rpm
7feeaee30f45054405d53442d24aa026 mes5/i586/tshark-1.2.18-0.1mdvmes5.2.i586.rpm
e45c21d3c612542d2cd23a0f6dd67446 mes5/i586/wireshark-1.2.18-0.1mdvmes5.2.i586.rpm
723ed6ef321f3312aed457fe580517c5 mes5/i586/wireshark-tools-1.2.18-0.1mdvmes5.2.i586.rpm
467296be324d57475e4851836e11d298 mes5/SRPMS/wireshark-1.2.18-0.1mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
b63416829316371c6581f9f971acffaf mes5/x86_64/dumpcap-1.2.18-0.1mdvmes5.2.x86_64.rpm
2bba0ede9eda4b940bb61188d9c369f0 mes5/x86_64/lib64wireshark0-1.2.18-0.1mdvmes5.2.x86_64.rpm
8fb290c4801f6a72d706294aaa31a1d6
mes5/x86_64/lib64wireshark-devel-1.2.18-0.1mdvmes5.2.x86_64.rpm
c5d3393fae8aab447d72dceca8ce4404 mes5/x86_64/rawshark-1.2.18-0.1mdvmes5.2.x86_64.rpm
452e7b2c91b6015416f16ef455483874 mes5/x86_64/tshark-1.2.18-0.1mdvmes5.2.x86_64.rpm
06a29ce40c36efcbbd3665bf9cdaf0e0 mes5/x86_64/wireshark-1.2.18-0.1mdvmes5.2.x86_64.rpm
8cd056ef2628b1172e65c8f1aa056864 mes5/x86_64/wireshark-tools-1.2.18-0.1mdvmes5.2.x86_64.rpm
467296be324d57475e4851836e11d298 mes5/SRPMS/wireshark-1.2.18-0.1mdvmes5.2.src.rpm


To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com


Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFOK9nmmqjQ0CJFipgRAmmwAJ9ifcqMtHwztgEQ3VvN6iQrPguZ/gCfV/OJ
cwqNvBnqSqCP1sLUcRm5uPA=
=8aZE
-----END PGP SIGNATURE-----

Related for SECURITYVULNS:DOC:26695