Debian Security Advisory DSA 3141-1 (wireshark - Security Update) Network Vulnerability

Summary

Multiple vulnerabilities were discovered in the dissectors/parsers for SSL/TLS and DEC DNA, which could result in denial of service.

Solution

For the stable distribution (wheezy), these problems have been fixed in version 1.8.2-5wheezy14. For the upcoming stable distribution (jessie), these problems have been fixed in version 1.12.1+g01b65bf-3. For the unstable distribution (sid), these problems have been fixed in version 1.12.1+g01b65bf-3. We recommend that you upgrade your wireshark packages.

Insight

Wireshark is a network 'sniffer' - a tool that captures and analyzes packets off the wire. Wireshark can decode too many protocols to list here.

Affected

wireshark on Debian Linux

Detection

This check tests the installed software version using the apt package manager.

References