Debian Security Advisory DSA 2625-1 (wireshark - Several Vulnerabilities) Network Vulnerability

Summary

Multiple vulnerabilities were discovered in the dissectors for the CLNP, DTLS, DCP-ETSI and NTLMSSP protocols, which could result in denial of service or the execution of arbitrary code.

Solution

For the stable distribution (squeeze), these problems have been fixed in version 1.2.11-6+squeeze9. For the unstable distribution (sid), these problems will be fixed soon. We recommend that you upgrade your wireshark packages.

Insight

Wireshark is a network 'sniffer' - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.

Affected

wireshark on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References