Debian Security Advisory DSA 2825-1 (wireshark - Several Vulnerabilities) Network Vulnerability

Summary

Laurent Butti and Garming Sam discovered multiple vulnerabilities in the dissectors for NTLMSSPv2 and BSSGP, which could lead to denial of service or the execution of arbitrary code.

Solution

For the stable distribution (wheezy), these problems have been fixed in version 1.8.2-5wheezy9. For the unstable distribution (sid), these problems have been fixed in version 1.10.4-1. We recommend that you upgrade your wireshark packages.

Insight

Wireshark is a network 'sniffer' - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.

Affected

wireshark on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References