RHSA-2012:0509: Moderate: wireshark security update
Wireshark is a program for monitoring network traffic. Wireshark waspreviously known as Ethereal.Several flaws were found in Wireshark. If Wireshark read a malformed packetoff a network or opened a malicious dump file, it could crash or, possibly,execute arbitrary code as the user running Wireshark. (CVE-2011-1590,CVE-2011-4102, CVE-2012-1595)Several denial of service flaws were found in Wireshark. Wireshark couldcrash or stop responding if it read a malformed packet off a network, oropened a malicious dump file. (CVE-2011-1143, CVE-2011-1957, CVE-2011-1958,CVE-2011-1959, CVE-2011-2174, CVE-2011-2175, CVE-2011-2597, CVE-2011-2698,CVE-2012-0041, CVE-2012-0042, CVE-2012-0067, CVE-2012-0066)Users of Wireshark should upgrade to these updated packages, which containbackported patches to correct these issues. All running instances ofWireshark must be restarted for the update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2012:0509?
The severity of RHSA-2012:0509 is classified as critical due to potential crashes and arbitrary code execution risks when processing malformed packets or malicious files.
How do I fix RHSA-2012:0509?
To fix RHSA-2012:0509, update Wireshark to version 1.2.15-2.el6_2.1 or later.
What versions of Wireshark are affected by RHSA-2012:0509?
Wireshark versions prior to 1.2.15-2.el6_2.1 are affected by RHSA-2012:0509.
What packages are associated with RHSA-2012:0509?
The affected packages associated with RHSA-2012:0509 include wireshark, wireshark-debuginfo, wireshark-devel, and wireshark-gnome.
What types of vulnerabilities does RHSA-2012:0509 address?
RHSA-2012:0509 addresses vulnerabilities that can lead to application crashes and the potential execution of arbitrary code when handling malicious network traffic.