Gentoo Security Advisory GLSA 200712-23 (wireshark) Network Vulnerability

Summary

The remote host is missing updates announced in advisory GLSA 200712-23.

Solution

All Wireshark users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/wireshark-0.99.7' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200712-23 http://bugs.gentoo.org/show_bug.cgi?id=199958

Insight

Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code and a Denial of Service.

Severity

Classification

CVE	CVE-2007-6111, CVE-2007-6112, CVE-2007-6113, CVE-2007-6114, CVE-2007-6115, CVE-2007-6116, CVE-2007-6117, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451

CVSS	Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Related Vulnerabilities

Gentoo Security Advisory GLSA 200403-11 (Squid)
Gentoo Security Advisory GLSA 200408-13 (kde, kdebase, kdelibs)
Gentoo Security Advisory GLSA 200406-06 (CVS)
Gentoo Security Advisory GLSA 200311-08 (Libnids)
Gentoo Security Advisory GLSA 200407-17 (net-dialup/l2tpd)

Take action and discover your vulnerabilities