USN-3986-1: Wireshark vulnerabilities
Published May 16, 2019
·Updated
It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malform packets onto the wire or convincing someone to read a malformed packet trace file.
Affected Software
60 affected componentsFixes available
All of the following
ubuntu/libwireshark-data<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libwireshark11<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libwiretap8<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libwscodecs2<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libwsutil9<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/tshark<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/wireshark<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/wireshark-common<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/wireshark-gtk<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/wireshark-qt<2.6.8-1~ubuntu18.10.0
2.6.8-1~ubuntu18.10.0
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libwireshark-data<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libwireshark11<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libwiretap8<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libwscodecs2<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libwsutil9<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/tshark<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/wireshark<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/wireshark-common<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/wireshark-gtk<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/wireshark-qt<2.6.8-1~ubuntu18.04.0
2.6.8-1~ubuntu18.04.0
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libwireshark-data<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libwireshark11<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libwiretap8<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libwscodecs2<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libwsutil9<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/tshark<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/wireshark<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/wireshark-common<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/wireshark-gtk<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
All of the following
ubuntu/wireshark-qt<2.6.8-1~ubuntu16.04.0
2.6.8-1~ubuntu16.04.0
Ubuntu Ubuntu=16.04
Event History
May 16, 2019
Advisory Published
via Ubuntu·12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of USN-3986-1?
USN-3986-1 is classified as a high-severity vulnerability due to the potential for crashes caused by malformed packets.
2
How do I fix USN-3986-1?
To fix USN-3986-1, update your Wireshark and related packages to version 2.6.8-1~ubuntu18.10.0 or later.
3
What systems are affected by USN-3986-1?
USN-3986-1 affects Ubuntu 18.10 and earlier versions of Ubuntu, including 18.04 and 16.04.
4
Can USN-3986-1 be exploited remotely?
Yes, USN-3986-1 can be exploited by a remote attacker through the injection of malformed packets.
5
Is there a workaround for USN-3986-1?
Currently, the best mitigation for USN-3986-1 is to apply the available patches or avoid using untrusted packet capture files.