Security update for wireshark
This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed: - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. (bsc#1049621) - CVE-2017-11410: The WBXML dissector could go into an infinite loop. (bsc#1049255) - CVE-2017-11408: The AMQP dissector could crash. (bsc#1049255) - CVE-2017-11407: The MQ dissector could crash. (bsc#1049255) - CVE-2017-11406: The DOCSIS dissector could go into an infinite loop. (bsc#1049255)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed: - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. (bsc#1049621) - CVE-2017-11410: The WBXML dissector could go into an infinite loop. (bsc#1049255) - CVE-2017-11408: The AMQP dissector could crash. (bsc#1049255) - CVE-2017-11407: The MQ dissector could crash. (bsc#1049255) - CVE-2017-11406: The DOCSIS dissector could go into an infinite loop. (bsc#1049255)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1049255
- https://bugzilla.suse.com/1049621
- https://www.suse.com/security/cve/CVE-2017-11406
- https://www.suse.com/security/cve/CVE-2017-11407
- https://www.suse.com/security/cve/CVE-2017-11408
- https://www.suse.com/security/cve/CVE-2017-11410
- https://www.suse.com/security/cve/CVE-2017-11411
- https://www.suse.com/support/update/announcement/2017/suse-su-20172032-1/