USN-4133-1: Wireshark vulnerabilities

Wireshark vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

Ubuntu 19.04
Ubuntu 18.04 LTS
Ubuntu 16.04 LTS

Summary

Wireshark could be made to crash if it received specially crafted network
traffic or input files.

Software Description

wireshark – network traffic analyzer

Details

It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malformed packets
onto the wire or convincing someone to read a malformed packet trace file.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04: libwireshark-data – 2.6.10-1~ubuntu19.04.0; libwireshark11 – 2.6.10-1~ubuntu19.04.0; libwiretap8 – 2.6.10-1~ubuntu19.04.0; libwscodecs2 – 2.6.10-1~ubuntu19.04.0; libwsutil9 – 2.6.10-1~ubuntu19.04.0; tshark – 2.6.10-1~ubuntu19.04.0; wireshark – 2.6.10-1~ubuntu19.04.0; wireshark-common – 2.6.10-1~ubuntu19.04.0; wireshark-gtk – 2.6.10-1~ubuntu19.04.0; wireshark-qt – 2.6.10-1~ubuntu19.04.0
Ubuntu 18.04 LTS: libwireshark-data – 2.6.10-1~ubuntu18.04.0; libwireshark11 – 2.6.10-1~ubuntu18.04.0; libwiretap8 – 2.6.10-1~ubuntu18.04.0; libwscodecs2 – 2.6.10-1~ubuntu18.04.0; libwsutil9 – 2.6.10-1~ubuntu18.04.0; tshark – 2.6.10-1~ubuntu18.04.0; wireshark – 2.6.10-1~ubuntu18.04.0; wireshark-common – 2.6.10-1~ubuntu18.04.0; wireshark-gtk – 2.6.10-1~ubuntu18.04.0; wireshark-qt – 2.6.10-1~ubuntu18.04.0
Ubuntu 16.04 LTS: libwireshark-data – 2.6.10-1~ubuntu16.04.0; libwireshark11 – 2.6.10-1~ubuntu16.04.0; libwiretap8 – 2.6.10-1~ubuntu16.04.0; libwscodecs2 – 2.6.10-1~ubuntu16.04.0; libwsutil9 – 2.6.10-1~ubuntu16.04.0; tshark – 2.6.10-1~ubuntu16.04.0; wireshark – 2.6.10-1~ubuntu16.04.0; wireshark-common – 2.6.10-1~ubuntu16.04.0; wireshark-gtk – 2.6.10-1~ubuntu16.04.0; wireshark-qt – 2.6.10-1~ubuntu16.04.0

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

Source: USN-4133-1: Wireshark vulnerabilities

지락문화예술공작단