Debian Security Advisory DSA 2792-1 (wireshark - Several Vulnerabilities) Network Vulnerability

Summary

Multiple vulnerabilities were discovered in the dissectors for IEEE 802.15.4, NBAP, SIP and TCP, which could result in denial of service. The oldstable distribution (squeeze) is only affected by CVE-2013-6340 . This problem has been fixed in version 1.2.11-6+squeeze13.

Solution

For the stable distribution (wheezy), these problems have been fixed in version 1.8.2-5wheezy7. For the unstable distribution (sid), these problems have been fixed in version 1.10.3-1. We recommend that you upgrade your wireshark packages.

Insight

Wireshark is a network 'sniffer' - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.

Affected

wireshark on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References