RHSA-2013:1569Medium

Red Hat Security Advisory: wireshark security, bug fix, and enhancement update

Published
November 20, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (31)

CVE-2012-2392 →CVE-2012-3825 →CVE-2012-4285 →CVE-2012-4288 →CVE-2012-4289 →CVE-2012-4290 →CVE-2012-4291 →CVE-2012-4292 →CVE-2012-5595 · no recordCVE-2012-5597 · no recordCVE-2012-5598 · no recordCVE-2012-5599 · no recordCVE-2012-5600 · no recordCVE-2012-6056 →CVE-2012-6059 →CVE-2012-6060 →CVE-2012-6061 →CVE-2012-6062 →CVE-2013-3557 →CVE-2013-3559 →CVE-2013-3561 →CVE-2013-4081 →CVE-2013-4083 →CVE-2013-4927 →CVE-2013-4931 →CVE-2013-4932 →CVE-2013-4933 →CVE-2013-4934 →CVE-2013-4935 →CVE-2013-4936 →CVE-2013-5721 →

📋 Description

CVE-2012-2392 — wireshark: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors (wnpa-sec-2012-08) CVE-2012-3825 — wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08) CVE-2012-4285 — wireshark: crash due to zero division in DCP ETSI dissector (wnpa-sec-2012-13) CVE-2012-4288 — wireshark: DoS via excessive resource consumption in XTP dissector (wnpa-sec-2012-15) CVE-2012-4289 — wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17) CVE-2012-4290 — wireshark: DoS via excessive CPU consumption in CTDB dissector (wnpa-sec-2012-23) CVE-2012-4291 — wireshark: DoS via excessive system resource consumption in CIP dissector (wnpa-sec-2012-20) CVE-2012-4292 — wireshark: crash in STUN dissector (wnpa-sec-2012-21) CVE-2012-5595 — wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33) CVE-2012-5597 — wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35) CVE-2012-5598 — wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36) CVE-2012-5599 — wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37) CVE-2012-5600 — wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38) CVE-2012-6056 — wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33) CVE-2012-6059 — wireshark: DoS (crash) in the ISAKMP dissector (wnpa-sec-2012-35) CVE-2012-6060 — wireshark: DoS (infinite loop) in the iSCSI dissector (wnpa-sec-2012-36) CVE-2012-6061 — wireshark: DoS (infinite loop) in the WTP dissector (wnpa-sec-2012-37) CVE-2012-6062 — wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38) CVE-2013-3557 — wireshark: DoS (crash) in the ASN.1 BER dissector (wnpa-sec-2013-25, upstream #8599) CVE-2013-3559 — wireshark: DoS (crash) in the DCP ETSI dissector (wnpa-sec-2013-27, upstream #8231, #8540, #8541) CVE-2013-3561 — wireshark: Multiple Denial of Service flaws CVE-2013-4081 — wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39) CVE-2013-4083 — wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41) CVE-2013-4927 — wireshark: Integer signedness error in the Bluetooth SDP dissector (wnpa-sec-2013-45) CVE-2013-4931 — wireshark: DoS (infinite loop) in the GSM RR dissector (wnpa-sec-2013-49) CVE-2013-4932 — wireshark: Multiple array index errors in the GSM A Common dissector (wnpa-sec-2013-50) CVE-2013-4933 — wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) CVE-2013-4934 — wireshark: DoS (application crash) in the Netmon file parser (wnpa-sec-2013-51) (A different flaw than CVE-2013-4933) CVE-2013-4935 — wireshark: DoS (application crash) in the ASN.1 PER dissector (wnpa-sec-2013-52) CVE-2013-4936 — wireshark: DoS (NULL pointer dereference, crash) in the PROFINET Real-Time dissector (wnpa-sec-2013-53) CVE-2013-5721 — wireshark: MQ dissector crash (wnpa-sec-2013-58, upstream bug 9079)

🎯 Affected products60

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • wireshark-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • wireshark-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • wireshark-0:1.8.10-4.el6.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • wireshark-0:1.8.10-4.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
  • wireshark-0:1.8.10-4.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • wireshark-0:1.8.10-4.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-0:1.8.10-4.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • wireshark-debuginfo-0:1.8.10-4.el6.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • +30 more not shown

✅ Remediation

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

🔗 References (38)