Debian Security Advisory DSA 2700-1 (wireshark - Several Vulnerabilities) Network Vulnerability

Summary

Multiple vulnerabilities were discovered in the dissectors for GTPv2, ASN.1 BER, PPP CCP, DCP ETSI, MPEG DSM-CC and Websocket, which could result in denial of service or the execution of arbitrary code. The oldstable distribution (squeeze) is not affected.

Solution

For the stable distribution (wheezy), these problems have been fixed in version 1.8.2-5wheezy3. For the unstable distribution (sid), these problems have been fixed in version 1.8.7-1. We recommend that you upgrade your wireshark packages.

Insight

Wireshark is a network 'sniffer' - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.

Affected

wireshark on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References