From 7ab5863ca5d0b913d0f668f971f23232110d15866be823f8c99c3f66bc998865 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Thu, 5 Apr 2018 07:40:08 +0000 Subject: [PATCH] cve OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=244 --- wireshark.changes | 21 ++++++++++++--------- 1 file changed, 12 insertions(+), 9 deletions(-) diff --git a/wireshark.changes b/wireshark.changes index 7d2410a..abadc54 100644 --- a/wireshark.changes +++ b/wireshark.changes @@ -6,15 +6,18 @@ Wed Apr 4 20:20:16 UTC 2018 - astieger@suse.com trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files (bsc#1088200): - * ADB dissector crash - * IEEE 802.15.4 dissector crash - * NBAP dissector crash - * VLAN dissector crash - * LWAPP dissector crash - * Kerberos dissector crash - * TCP dissector crash - * CQL infinite loop - * Memory leaks in multiple dissectors + * CVE-2018-9264: ADB dissector crash + * CVE-2018-9260: IEEE 802.15.4 dissector crash + * CVE-2018-9261: NBAP dissector crash + * CVE-2018-9262: VLAN dissector crash + * CVE-2018-9256: LWAPP dissector crash + * CVE-2018-9263: Kerberos dissector crash + * CVE-2018-9258: TCP dissector crash + * CVE-2018-9257: CQL infinite loop + * Memory leaks in multiple dissectors: + CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268, + CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272, + CVE-2018-9273, CVE-2018-9274 * Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html