Multiple out-of-bounds read vulnerabilities have been discovered in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 4.0.11 | >= 4.0.11 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-4.0.11"
Multiple vulnerabilities have been found in Wireshark, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 4.0.6 | >= 4.0.6 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-4.0.6"
Multiple vulnerabilities have been discovered in Wireshark, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.6.8 | >= 3.6.8 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.6.8"
Multiple vulnerabilities have been found in Wireshark, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.4.6 | >= 3.4.6 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.4.6"
Multiple vulnerabilities have been found in Wireshark, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.4.2 | >= 3.4.2 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.4.2"
Multiple vulnerabilities have been found in Wireshark, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.4.0 | >= 3.4.0 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.4.0"
A vulnerability in Wireshark could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.2.6 | >= 3.2.6 |
Wireshark is a network protocol analyzer formerly known as ethereal.
A double free error was discovered in Wiresharkâs Kafka dissector.
A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a malformed packet trace file, causing a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.2.6"
Multiple vulnerabilities have been found in Wireshark, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 3.2.5 | >= 3.2.5 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.2.5"
Multiple vulnerabilities have been found in Wireshark, the worst of which allows remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 2.2.6 | >= 2.2.6 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to process a specially crafted network packet using Wireshark, possibly resulting a Denial of Service condition.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-2.2.6"
Multiple vulnerabilities have been found in Wireshark, allowing local attackers to escalate privileges and remote attackers to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 2.0.2 | >= 2.0.2 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
Remote attackers could cause Denial of Service and local attackers could escalate privileges.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-2.0.2"
Multiple vulnerabilities have been found in Wireshark, allowing attackers to cause Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.12.7 | >= 1.12.7 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.12.7"
Multiple vulnerabilities have been found in Wireshark which could allow remote attackers to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.12.2 | >= 1.12.2 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker can cause a Denial of Service condition via specially crafted packets.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.12.2"
Multiple vulnerabilities have been found in Wireshark which could allow remote attackers to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.10.9 | >= 1.10.9 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker can cause a Denial of Service condition via specially crafted packets.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.10.9"
Multiple vulnerabilities have been found in Wireshark, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.10.8 | >= 1.8.15 (revision), >= 1.10.8 |
Wireshark is a network protocol analyzer formerly known as ethereal.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker can cause arbitrary code execution or a Denial of Service condition via a specially crafted packet.
There is no known workaround at this time.
All Wireshark 1.8.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.8.15"
All Wireshark 1.10.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.10.8"
Multiple vulnerabilities have been found in Wireshark, allowing remote attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.10.3 | >= 1.10.3, >= 1.8.11 (revision) |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Wireshark 1.10 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.10.3"
All Wireshark 1.8 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.8.11"
Multiple vulnerabilities have been found in Wireshark, allowing remote attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.10.1 | >= 1.10.1, >= 1.8.9 (revision) |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Wireshark 1.10 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.10.1"
All Wireshark 1.8 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.8.9"
Multiple vulnerabilities in Wireshark allow for the remote execution of arbitrary code, or a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.4.9 | >= 1.4.9 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.
A remote attacker could send specially crafted packets on a network being monitored by Wireshark, entice a user to open a malformed packet trace file using Wireshark, or deploy a specially crafted Lua script for use by Wireshark, possibly resulting in the execution of arbitrary code, or a Denial of Service condition.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.4.9"
Multiple vulnerabilities were found in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.2.8-r1 | >= 1.2.8-r1 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities were found in the Daintree SNA file parser, the SMB, SMB2, IPMI, and DOCSIS dissectors. For further information please consult the CVE entries referenced below.
A remote attacker could cause a Denial of Service and possibly execute arbitrary code via crafted packets or malformed packet trace files.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.2.8-r1"
Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code, or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.2.3 | >= 1.2.3 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark:
A remote attacker could entice a user to open a specially crafted "erf" file using Wireshark, possibly resulting in the execution of arbitrary code with the privileges of the user running the application. A remote attacker could furthermore send specially crafted packets on a network being monitored by Wireshark or entice a user to open a malformed packet trace file using Wireshark, possibly resulting in a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.2.3"
Multiple vulnerabilities have been discovered in Wireshark which allow for Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.2.1 | >= 1.2.1 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities were discovered in Wireshark:
A remote attacker could exploit these vulnerabilities by sending specially crafted packets on a network being monitored by Wireshark or by enticing a user to read a malformed packet trace file to cause a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.2.1"
Multiple vulnerabilities have been discovered in Wireshark which allow for Denial of Service or remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.0.8 | >= 1.0.8 |
Wireshark is a versatile network protocol analyzer.
Multiple vulnerabilities have been discovered in Wireshark:
A remote attacker could exploit these vulnerabilities by sending specially crafted packets on a network being monitored by Wireshark or by enticing a user to read a malformed packet trace file which can trigger a Denial of Service (application crash or excessive CPU and memory usage) and possibly allow for the execution of arbitrary code with the privileges of the user running Wireshark.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.0.8"
Multiple Denial of Service vulnerabilities have been discovered in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.0.3 | >= 1.0.3 |
Wireshark is a network protocol analyzer with a graphical front-end.
The following vulnerabilities were reported:
A remote attacker could exploit these vulnerabilities by sending specially crafted packets on a network being monitored by Wireshark or by enticing a user to read a malformed packet trace file, causing a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.0.3"
Multiple Denial of Service vulnerabilities have been discovered in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.0.2 | >= 1.0.2 |
Wireshark is a network protocol analyzer with a graphical front-end.
Multiple vulnerabilities related to memory management were discovered in the GSM SMS dissector (CVE-2008-3137), the PANA and KISMET dissectors (CVE-2008-3138), the RTMPT dissector (CVE-2008-3139), the syslog dissector (CVE-2008-3140) and the RMI dissector (CVE-2008-3141) and when reassembling fragmented packets (CVE-2008-3145).
A remote attacker could exploit these vulnerabilities by sending a specially crafted packet on a network being monitored by Wireshark or enticing a user to read a malformed packet trace file, causing a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.0.2"
Multiple Denial of Service vulnerabilities have been discovered in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 1.0.0 | >= 1.0.0 |
Wireshark is a network protocol analyzer with a graphical front-end.
Errors exist in:
A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a malformed packet trace file, causing a Denial of Service.
Disable the X.509sat, Roofnet, LDAP, and SCCP dissectors.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.0.0"
Multiple Denial of Service vulnerabilities have been discovered in Wireshark.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 0.99.8 | >= 0.99.8 |
Wireshark is a network protocol analyzer with a graphical front-end.
Multiple unspecified errors exist in the SCTP, SNMP, and TFTP dissectors.
A remote attacker could cause a Denial of Service by sending a malformed packet.
Disable the SCTP, SNMP, and TFTP dissectors.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.8"
Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 0.99.7 | >= 0.99.7 |
Wireshark is a network protocol analyzer with a graphical front-end.
Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP (CVE-2007-6111), PPP (CVE-2007-6112), DNP (CVE-2007-6113), SSL and iSeries (OS/400) Communication traces (CVE-2007-6114), ANSI MAP (CVE-2007-6115), Firebird/Interbase (CVE-2007-6116), HTTP (CVE-2007-6117), MEGACO (CVE-2007-6118), DCP ETSI (CVE-2007-6119), Bluetooth SDP (CVE-2007-6120), RPC Portmap (CVE-2007-6121), SMB (CVE-2007-6438), IPv6 amd USB (CVE-2007-6439), WiMAX (CVE-2007-6441), RPL (CVE-2007-6450), CIP (CVE-2007-6451). The vulnerabilities were discovered by Stefan Esser, Beyond Security, Fabiodds, Peter Leeming, Steve and ainsley.
A remote attacker could send specially crafted packets on a network being monitored with Wireshark or entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark (which might be the root user), or a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.7"
Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code and a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 0.99.6 | >= 0.99.6 |
Wireshark is a network protocol analyzer with a graphical front-end.
Wireshark doesn't properly handle chunked encoding in HTTP responses (CVE-2007-3389), iSeries capture files (CVE-2007-3390), certain types of DCP ETSI packets (CVE-2007-3391), and SSL or MMS packets (CVE-2007-3392). An off-by-one error has been discovered in the DHCP/BOOTP dissector when handling DHCP-over-DOCSIS packets (CVE-2007-3393).
A remote attacker could send specially crafted packets on a network being monitored with Wireshark, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark which might be the root user, or a Denial of Service.
In order to prevent root compromise, take network captures with tcpdump and analyze them running Wireshark as a least privileged user.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.6"
Wireshark is vulnerable to several security issues that may lead to a Denial of Service and/or the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/wireshark | * | < 0.99.3 | >= 0.99.3 |
Wireshark is a feature-rich network protocol analyzer.
The following vulnerabilities have been discovered in Wireshark. Firstly, if the IPsec ESP parser is used it is susceptible to off-by-one errors, this parser is disabled by default; secondly, the SCSI dissector is vulnerable to an unspecified crash; and finally, the Q.2931 dissector of the SSCOP payload may use all the available memory if a port range is configured. By default, no port ranges are configured.
An attacker might be able to exploit these vulnerabilities, resulting in a crash or the execution of arbitrary code with the permissions of the user running Wireshark, possibly the root user.
Disable the SCSI and Q.2931 dissectors with the "Analyse" and "Enabled protocols" menus. Make sure the ESP decryption is disabled, with the "Edit -> Preferences -> Protocols -> ESP" menu.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.3"
Wireshark (formerly known as Ethereal) is vulnerable to several security issues, potentially allowing the execution of arbitrary code by a remote attacker.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/ethereal | * | <= 0.99.0-r1 | — |
| net-analyzer/wireshark | * | < 0.99.2 | >= 0.99.2 |
Wireshark, formerly known as Ethereal, is a popular network protocol analyzer.
Wireshark dissectors have been found vulnerable to a large number of exploits, including off-by-one errors, buffer overflows, format string overflows and an infinite loop.
Running an affected version of Wireshark or Ethereal could allow for a remote attacker to execute arbitrary code on the user's computer by sending specially crafted packets.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.2"
All Ethereal users should migrate to Wireshark:
# emerge --sync # emerge --ask --unmerge net-analyzer/ethereal # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.2"
To keep the [saved] configuration from Ethereal and reuse it with Wireshark:
# mv ~/.ethereal ~/.wireshark