Advisories » MGASA-2014-0471

Updated wireshark packages fix security vulnerabilities

Publication date: 21 Nov 2014
Modification date: 21 Nov 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-8710 , CVE-2014-8711 , CVE-2014-8712 , CVE-2014-8713 , CVE-2014-8714

Description

SigComp UDVM buffer overflow (CVE-2014-8710).

AMQP crash (CVE-2014-8711).

NCP crashes (CVE-2014-8712, CVE-2014-8713).

TN5250 infinite loops (CVE-2014-8714).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14531
• https://www.wireshark.org/security/wnpa-sec-2014-20.html
• https://www.wireshark.org/security/wnpa-sec-2014-21.html
• https://www.wireshark.org/security/wnpa-sec-2014-22.html
• https://www.wireshark.org/security/wnpa-sec-2014-23.html
• https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
• https://www.wireshark.org/news/20141112.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714

SRPMS

3/core

• wireshark-1.10.11-1.mga3

4/core

• wireshark-1.10.11-1.mga4