| Package | wireshark |
|---|---|
| Version | 1.12.1+g01b65bf-4+deb8u6~deb7u18 |
| Related CVEs | CVE-2017-9345 CVE-2017-9352 CVE-2017-9617 CVE-2017-13767 CVE-2019-12295 |
Several vulnerabilities have been found in wireshark, a network traffic analyzer.
CVE-2017-9345: infinite loop in DNS dissector.
CVE-2017-9352: infinite loop in Bazaar dissector.
CVE-2017-9617: stack exhaustion in adissect_daap_one_tag (DAAP dissector).
CVE-2017-13767: infinite loop in MSDP dissector.
CVE-2019-12295: stack overflow in the dissection engine.
These vulnerabilities might be leveraged by remote attackers to cause denial of service (DoS) via a crafted packet or PCAP file.
For Debian 7 Wheezy, these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u18.
We recommend that you upgrade your wireshark packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.