Security update for wireshark SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:1612-1 Final 1 1 2016-06-17T11:28:44Z current 2016-06-17T11:28:44Z 2016-06-17T11:28:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wireshark This update for wireshark fixes an number of security issues. Issues in protocol dissectors could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file. - CVE-2016-5350: The SPOOLS dissector could go into an infinite loop - CVE-2016-5351: The IEEE 802.11 dissector could crash - CVE-2016-5353: The UMTS FP dissector could crash - CVE-2016-5354: Some USB dissectors could crash - CVE-2016-5355: The Toshiba file parser could crash - CVE-2016-5356: The CoSine file parser could crash - CVE-2016-5357: The NetScreen file parser could crash - CVE-2016-5358: The Ethernet dissector could crash The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html E-Mail link for openSUSE-SU-2016:1612-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 wireshark-1.12.12-23.1 wireshark-devel-1.12.12-23.1 wireshark-ui-gtk-1.12.12-23.1 wireshark-ui-qt-1.12.12-23.1 wireshark-1.12.12-23.1 as a component of openSUSE Leap 42.1 wireshark-devel-1.12.12-23.1 as a component of openSUSE Leap 42.1 wireshark-ui-gtk-1.12.12-23.1 as a component of openSUSE Leap 42.1 wireshark-ui-qt-1.12.12-23.1 as a component of openSUSE Leap 42.1 epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. CVE-2016-5350 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5350.html CVE-2016-5350 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5351 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5351.html CVE-2016-5351 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5353 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5353.html CVE-2016-5353 https://bugzilla.suse.com/983671 SUSE Bug 983671 The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5354 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5354.html CVE-2016-5354 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5355 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5355.html CVE-2016-5355 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5356 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5356.html CVE-2016-5356 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5357 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5357.html CVE-2016-5357 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5358 openSUSE Leap 42.1:wireshark-1.12.12-23.1 openSUSE Leap 42.1:wireshark-devel-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-gtk-1.12.12-23.1 openSUSE Leap 42.1:wireshark-ui-qt-1.12.12-23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-06/msg00068.html https://www.suse.com/security/cve/CVE-2016-5358.html CVE-2016-5358 https://bugzilla.suse.com/983671 SUSE Bug 983671