| Description: | Summary:
The remote host is missing an update for the Debian 'wireshark' package(s) announced via the DLA-2547-1 advisory.
Vulnerability Insight:
Several vulnerabilities were fixed in Wireshark, a network sniffer.
CVE-2019-13619
ASN.1 BER and related dissectors crash
CVE-2019-16319
The Gryphon dissector could go into an infinite loop.
CVE-2019-19553
The CMS dissector could crash.
CVE-2020-7045
The BT ATT dissector could crash.
CVE-2020-9428
The EAP dissector could crash.
CVE-2020-9430
The WiMax DLMAP dissector could crash.
CVE-2020-9431
The LTE RRC dissector could leak memory.
CVE-2020-11647
The BACapp dissector could crash.
CVE-2020-13164
The NFS dissector could crash.
CVE-2020-15466
The GVCP dissector could go into an infinite loop.
CVE-2020-25862
The TCP dissector could crash.
CVE-2020-25863
The MIME Multipart dissector could crash.
CVE-2020-26418
Memory leak in the Kafka protocol dissector.
CVE-2020-26421
Crash in USB HID protocol dissector.
CVE-2020-26575
The Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop.
CVE-2020-28030
The GQUIC dissector could crash.
For Debian 9 stretch, these problems have been fixed in version 2.6.20-0+deb9u1.
We recommend that you upgrade your wireshark packages.
For the detailed security status of wireshark please refer to its security tracker page at: [link moved to references]
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references]
Affected Software/OS:
'wireshark' package(s) on Debian 9.
Solution:
Please install the updated package(s).
CVSS Score:
7.8
CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
