発行日:
2008-01-21
更新日:
2008-01-21

RHSA-2008:0058 - Security Advisory

概要

Moderate: wireshark security update

タイプ/重大度

Security Advisory: Moderate

トピック

Updated wireshark packages that fix several security issues are now
available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

説明

Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Several flaws were found in Wireshark. Wireshark could crash or possibly
execute arbitrary code as the user running Wireshark if it read a malformed
packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115,
CVE-2007-6117)

Several denial of service bugs were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off the network.
(CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119,
CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441,
CVE-2007-6450, CVE-2007-6451)

As well, Wireshark switched from using net-snmp to libsmi, which is
included in this errata.

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 0.99.7, and resolve these issues.

解決法

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

影響を受ける製品

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.6 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.1 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.1 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

修正

  • BZ - 397251 - CVE-2007-6111 wireshark mp3 and ncp flaws
  • BZ - 397271 - CVE-2007-6112 wireshark ppp flaws
  • BZ - 397281 - CVE-2007-6113 wireshark DNP3 flaws
  • BZ - 397291 - CVE-2007-6114 wireshark SSL and OS/400 trace flaws
  • BZ - 397311 - CVE-2007-6115 wireshark ANSI MAP flaws
  • BZ - 397321 - CVE-2007-6116 wireshark firebird/interbase flaws
  • BZ - 397331 - CVE-2007-6117 wireshark HTTP dissector flaws
  • BZ - 397341 - CVE-2007-6118 wireshark MEGACO dissector flaws
  • BZ - 397351 - CVE-2007-6119 wireshark DCP ETSI dissector flaws
  • BZ - 397361 - CVE-2007-6120 wireshark Bluetooth SDP dissector flaws
  • BZ - 397371 - CVE-2007-6121 wireshark RPC Portmap flaws
  • BZ - 426335 - Please consider adding libsmi to distro
  • BZ - 426336 - Please consider adding libsmi to distro
  • BZ - 427249 - CVE-2007-6438 wireshark SMB dissector crash
  • BZ - 427251 - CVE-2007-6439 wireshark IPv6 and USB dissector crash
  • BZ - 427252 - CVE-2007-6441 wireshark WiMAX dissector possible crash
  • BZ - 427253 - CVE-2007-6450 wireshark RPL dissector crash
  • BZ - 427254 - CVE-2007-6451 wireshark CIP dissector crash

CVE

参考資料

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390
libsmi-0.4.5-2.el4.s390.rpm SHA-256: c684c12c96ba5083e60d3303e97c1359f4e632af1c452e438c142d9aca6c1a4f
libsmi-devel-0.4.5-2.el4.s390.rpm SHA-256: 6de15067f06460ce337cb8a2599269bb8a9d9b4105259a30b03cdca4c77d25b9
wireshark-0.99.7-1.el4.s390.rpm SHA-256: d58f8588eb841de2570ebae0bbea1f5c75b5238cf766e8a2ca17659d63f562d4
wireshark-gnome-0.99.7-1.el4.s390.rpm SHA-256: e3c2e93b8c560bf987a673f058f54347cdcc09a5ddf0b1a2495606ef76c98c52

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
s390
libsmi-0.4.5-2.el4.s390.rpm SHA-256: c684c12c96ba5083e60d3303e97c1359f4e632af1c452e438c142d9aca6c1a4f
libsmi-devel-0.4.5-2.el4.s390.rpm SHA-256: 6de15067f06460ce337cb8a2599269bb8a9d9b4105259a30b03cdca4c77d25b9
wireshark-0.99.7-1.el4.s390.rpm SHA-256: d58f8588eb841de2570ebae0bbea1f5c75b5238cf766e8a2ca17659d63f562d4
wireshark-gnome-0.99.7-1.el4.s390.rpm SHA-256: e3c2e93b8c560bf987a673f058f54347cdcc09a5ddf0b1a2495606ef76c98c52

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。