Synopsis

Moderate: wireshark security update

Type/Severity

Security Advisory: Moderate

Topic

Updated wireshark packages that fix two security issues are now available
for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

A heap-based buffer overflow flaw was found in the Wireshark Local Download
Sharing Service (LDSS) dissector. If Wireshark read a malformed packet off
a network or opened a malicious dump file, it could crash or, possibly,
execute arbitrary code as the user running Wireshark. (CVE-2010-4300)

A denial of service flaw was found in Wireshark. Wireshark could crash or
stop responding if it read a malformed packet off a network, or opened a
malicious dump file. (CVE-2010-3445)

Users of Wireshark should upgrade to these updated packages, which contain
Wireshark version 1.2.13, and resolve these issues. All running instances
of Wireshark must be restarted for the update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 639486 - CVE-2010-3445 wireshark: stack overflow in BER dissector
• BZ - 656456 - CVE-2010-4300 Wireshark: Heap-based buffer overflow in LDSS dissector

CVEs

• CVE-2010-3445
• CVE-2010-4300

References

• http://www.redhat.com/security/updates/classification/#moderate
• http://www.wireshark.org/security/wnpa-sec-2010-13.html
• http://www.wireshark.org/security/wnpa-sec-2010-12.html

Red Hat Enterprise Linux Server 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
x86_64
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 5fd6d8398da531c52a7acac69cb66f966c214d817ed8c88840193cfb7f669fb6
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-devel-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 9a19dbeed5a5267bd5ee700d47de9070bd360c9eb4163d8726566990b41d52dd
wireshark-gnome-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: c4502148036f6b2bc4c96d3e4b8328ad4090e0c57d4e607bbd7e649f502dde47
i386
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-gnome-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 46360e0eee4ab7db695394438a2d0acde9b4a0e9918f6698a2b3c7fd2f1d7216

Red Hat Enterprise Linux Workstation 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
x86_64
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 5fd6d8398da531c52a7acac69cb66f966c214d817ed8c88840193cfb7f669fb6
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-devel-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 9a19dbeed5a5267bd5ee700d47de9070bd360c9eb4163d8726566990b41d52dd
wireshark-gnome-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: c4502148036f6b2bc4c96d3e4b8328ad4090e0c57d4e607bbd7e649f502dde47
i386
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-gnome-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 46360e0eee4ab7db695394438a2d0acde9b4a0e9918f6698a2b3c7fd2f1d7216

Red Hat Enterprise Linux Desktop 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
x86_64
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 5fd6d8398da531c52a7acac69cb66f966c214d817ed8c88840193cfb7f669fb6
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-devel-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 9a19dbeed5a5267bd5ee700d47de9070bd360c9eb4163d8726566990b41d52dd
wireshark-gnome-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: c4502148036f6b2bc4c96d3e4b8328ad4090e0c57d4e607bbd7e649f502dde47
i386
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-gnome-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 46360e0eee4ab7db695394438a2d0acde9b4a0e9918f6698a2b3c7fd2f1d7216

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
s390x
wireshark-1.2.13-1.el6_0.1.s390.rpm	SHA-256: 384d57c5dc2ee6a4c9ae2038228ab91422509b50cc9ddd336706a154db644bb0
wireshark-1.2.13-1.el6_0.1.s390x.rpm	SHA-256: 66066f5cd560c62ce64713fd557b1d4d1e0538a83eeaa626cfb06b53ced154fc
wireshark-debuginfo-1.2.13-1.el6_0.1.s390.rpm	SHA-256: aad688315286a46dc614312fad35402a81fc4a5f600659c192889a61a0d62800
wireshark-debuginfo-1.2.13-1.el6_0.1.s390.rpm	SHA-256: aad688315286a46dc614312fad35402a81fc4a5f600659c192889a61a0d62800
wireshark-debuginfo-1.2.13-1.el6_0.1.s390x.rpm	SHA-256: f0678dec6f10992d620ca7ab47c804023cc325fa2a719b755075b8b71910c94d
wireshark-debuginfo-1.2.13-1.el6_0.1.s390x.rpm	SHA-256: f0678dec6f10992d620ca7ab47c804023cc325fa2a719b755075b8b71910c94d
wireshark-devel-1.2.13-1.el6_0.1.s390.rpm	SHA-256: 2534553085ff3bc53038afd8ea3c43767192dbdb03c22eb523f8f3461751cbe7
wireshark-devel-1.2.13-1.el6_0.1.s390x.rpm	SHA-256: a59a220296b01a8529f3082e5f5a803abe4ae7bd7d582dbe1aec182155df1f8e
wireshark-gnome-1.2.13-1.el6_0.1.s390x.rpm	SHA-256: eb3cc0218f949bdb2a430b0248d3448c4b823b4db0db46ebe2cef4235e79cd52

Red Hat Enterprise Linux for Power, big endian 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
ppc64
wireshark-1.2.13-1.el6_0.1.ppc.rpm	SHA-256: 09324119f9b1096be857c728f63e2d88d57451e0a72c88f05c9a8c5609a85be5
wireshark-1.2.13-1.el6_0.1.ppc64.rpm	SHA-256: 3343601b90b20232dae735837b6e5ba52d58f92c3526a8df882dc929933d40f7
wireshark-debuginfo-1.2.13-1.el6_0.1.ppc.rpm	SHA-256: 4a577e03e2d347f0ce04bc11a2d4f0e0d65a18678631522e85993cc81241aafc
wireshark-debuginfo-1.2.13-1.el6_0.1.ppc.rpm	SHA-256: 4a577e03e2d347f0ce04bc11a2d4f0e0d65a18678631522e85993cc81241aafc
wireshark-debuginfo-1.2.13-1.el6_0.1.ppc64.rpm	SHA-256: 0acd3953e2c8e03c11fcb875ab34f7b332926e4701448f63f87794b66c2d88c9
wireshark-debuginfo-1.2.13-1.el6_0.1.ppc64.rpm	SHA-256: 0acd3953e2c8e03c11fcb875ab34f7b332926e4701448f63f87794b66c2d88c9
wireshark-devel-1.2.13-1.el6_0.1.ppc.rpm	SHA-256: 593749a0364b9fd578e6e6d94f843e9b4096a483c4b902d0e0ac92cdf2164c51
wireshark-devel-1.2.13-1.el6_0.1.ppc64.rpm	SHA-256: 6557b118a6745299aff5c372ad9be9acd247c83b4e3c32b2c81000b8b7b6fd46
wireshark-gnome-1.2.13-1.el6_0.1.ppc64.rpm	SHA-256: 848645604d79bcb7d8b35ab15bab259c85884236b77ec893e39e8ff563bcc095

Red Hat Enterprise Linux Server from RHUI 6

SRPM
wireshark-1.2.13-1.el6_0.1.src.rpm	SHA-256: 038c96274dd281c19511159d2e31c3aeaccfdcfe2c556d0ee31c39afd14e83cd
x86_64
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 5fd6d8398da531c52a7acac69cb66f966c214d817ed8c88840193cfb7f669fb6
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-debuginfo-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 8eedf33d838802b515274d3827144e8d1b81522d1825acc4db0d72cca05526d2
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-devel-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: 9a19dbeed5a5267bd5ee700d47de9070bd360c9eb4163d8726566990b41d52dd
wireshark-gnome-1.2.13-1.el6_0.1.x86_64.rpm	SHA-256: c4502148036f6b2bc4c96d3e4b8328ad4090e0c57d4e607bbd7e649f502dde47
i386
wireshark-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 76919546f761ea734e5c87c5332c04557250dde2a2e6696ca6d24493c77f9c10
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-debuginfo-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 779bee2848bfc69b36e88a7dea32de4bec463182e5893d3a07e4c674c4d11fc7
wireshark-devel-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 21392664cf473ea864534d3d6e5bf32435c3d823b3d86b67da2cea1780976402
wireshark-gnome-1.2.13-1.el6_0.1.i686.rpm	SHA-256: 46360e0eee4ab7db695394438a2d0acde9b4a0e9918f6698a2b3c7fd2f1d7216