RHSA-2015:2393Medium

Red Hat Security Advisory: wireshark security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (21)

CVE-2014-8710 →CVE-2014-8711 →CVE-2014-8712 →CVE-2014-8713 →CVE-2014-8714 →CVE-2015-0562 →CVE-2015-0563 →CVE-2015-0564 →CVE-2015-2188 →CVE-2015-2189 →CVE-2015-2191 →CVE-2015-3182 →CVE-2015-3810 →CVE-2015-3811 →CVE-2015-3812 →CVE-2015-3813 →CVE-2015-6243 →CVE-2015-6244 →CVE-2015-6245 →CVE-2015-6246 →CVE-2015-6248 →

📋 Description

CVE-2014-8710 — wireshark: SigComp dissector crash (wnpa-sec-2014-20) CVE-2014-8711 — wireshark: AMQP dissector crash (wnpa-sec-2014-21) CVE-2014-8712 — wireshark: NCP dissector crashes (wnpa-sec-2014-22) CVE-2014-8713 — wireshark: NCP dissector crashes (wnpa-sec-2014-22) CVE-2014-8714 — wireshark: TN5250 infinite loop (wnpa-sec-2014-23) CVE-2015-0562 — wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03) CVE-2015-0563 — wireshark: SMTP dissector crash (wnpa-sec-2015-04) CVE-2015-0564 — wireshark: TLS/SSL decryption crash (wnpa-sec-2015-05) CVE-2015-2188 — wireshark: The WCP dissector could crash while decompressing data (wnpa-sec-2015-07) CVE-2015-2189 — wireshark: The pcapng file parser could crash (wnpa-sec-2015-08) CVE-2015-2191 — wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10) CVE-2015-3182 — wireshark: crash on sample file genbroad.snoop CVE-2015-3810 — wireshark: WebSocket DoS (wnpa-sec-2015-13) CVE-2015-3811 — wireshark: WCP dissector crash (wnpa-sec-2015-14) CVE-2015-3812 — wireshark: X11 memory leak (wnpa-sec-2015-15) CVE-2015-3813 — wireshark: Reassembly memory leak (wnpa-sec-2015-16) CVE-2015-6243 — wireshark: Dissector table crash (wnpa-sec-2015-23) CVE-2015-6244 — wireshark: ZigBee dissector crash (wnpa-sec-2015-24) CVE-2015-6245 — wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25) CVE-2015-6246 — wireshark: WaveAgent dissector crash (wnpa-sec-2015-26) CVE-2015-6248 — wireshark: Ptvcursor crash (wnpa-sec-2015-28)

🎯 Affected products64

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • wireshark-0:1.10.14-7.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
  • wireshark-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • wireshark-0:1.10.14-7.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • wireshark-0:1.10.14-7.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • wireshark-0:1.10.14-7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • wireshark-0:1.10.14-7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-0:1.10.14-7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)
  • wireshark-debuginfo-0:1.10.14-7.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)
  • +34 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: This flaw can be mitigated in wireshark by disabling the WCP protocol dissector. In wireshark GUI application click on Analyze->Enabled Protocols and search for "WCP" and disable in. When using "tshark", the text interface, create a file called "disabled_protos" in the preferences folder (normally .wireshark folder in the home directory of the user running wireshark) and add "WCP" to it. This should disable the WCP protocol. Workaround: This flaw can be mitigated in wireshark by disabling the X11 protocol dissector. In wireshark GUI application click on Analyze->Enabled Protocols and search for "X11" and disable in. When using "tshark", the text interface, create a file called "disabled_protos" in the preferences folder (normally .wireshark folder in the home directory of the user running wireshark) and add "X11" to it. This should disable the X11 protocol. Workaround: This flaw can be mitigated in wireshark by disabling the ZigBee protocol dissector. In wireshark GUI application click on Analyze->Enabled Protocols and search for "ZigBee" and disable in. When using "tshark", the text interface, create a file called "disabled_protos" in the preferences folder (normally .wireshark folder in the home directory of the user running wireshark) and add "ZigBee" to it. This should disable the ZigBee protocol. Workaround: This flaw can be mitigated in wireshark by disabling the waveagent protocol dissector. In wireshark GUI application click on Analyze->Enabled Protocols and search for "waveagent" and disable in. When using "tshark", the text interface, create a file called "disabled_protos" in the preferences folder (normally .wireshark folder in the home directory of the user running wireshark) and add "waveagent" to it. This should disable the waveagent protocol.

🔗 References (24)