Univention Bugzilla – Bug 49094
wireshark: Multiple issues (4.2)
Last modified: 2019-03-27 16:44:54 CET
New Debian wireshark 1.12.1+g01b65bf-4+deb8u18 fixes: This update addresses the following issues: * BT L2CAP dissector divide by zero (wnpa-sec-2017-29) (CVE-2017-9344) * DICOM dissector infinite loop (wnpa-sec-2017-27) (CVE-2017-9349) * Stack-based off-by-one buffer overflow in dissect_ber_GeneralizedTime (CVE-2019-9209)
--- mirror/ftp/4.2/unmaintained/component/4.2-5-errata/source/wireshark_1.12.1+g01b65bf-4+deb8u17.dsc +++ apt/ucs_4.2-0-errata4.2-5/source/wireshark_1.12.1+g01b65bf-4+deb8u18.dsc @@ -1,3 +1,17 @@ +1.12.1+g01b65bf-4+deb8u18 [Mon, 25 Mar 2019 19:03:02 +0100] Thorsten Alteholz <debian@alteholz.de>: + + * Non-maintainer upload by the LTS Team. + * CVE-2019-9209 + Preventing the crash of the ASN.1 BER and related dissectors by + avoiding a buffer overflow associated with excessive digits in + time values. + * CVE-2017-9349 + Fixing an infinite loop in the DICOM dissector by validationg + a length value. + * CVE-2017-9344 + Avoid a divide by zero, by validating an interval value in the + Bluetooth L2CAP dissector. + 1.12.1+g01b65bf-4+deb8u17 [Mon, 28 Jan 2019 19:03:02 +0100] Thorsten Alteholz <debian@alteholz.de>: * Non-maintainer upload by the Wheezy LTS Team. <http://10.200.17.11/4.2-5/#5018925639927758379>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.2-5] 9e9f10279d Bug #49094: wireshark 1.12.1+g01b65bf-4+deb8u18 doc/errata/staging/wireshark.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) [4.2-5] 0dad40f390 Bug #49094: wireshark 1.12.1+g01b65bf-4+deb8u18 doc/errata/staging/wireshark.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+)
<http://errata.software-univention.de/ucs/4.2/627.html>