Test ID:	1.3.6.1.4.1.25623.1.0.69873
Category:	Fedora Local Security Checks
Title:	Fedora Core 14 FEDORA-2011-7846 (wireshark)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to wireshark announced via advisory FEDORA-2011-7846. Update Information: Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html. References: [ 1 ] Bug #710109 - CVE-2011-2175 wireshark: Heap-based buffer over-read in Visual Networks dissector https://bugzilla.redhat.com/show_bug.cgi?id=710109 [ 2 ] Bug #710097 - CVE-2011-2174 wireshark: Double-free flaw by uncompressing of a zlib compressed packet https://bugzilla.redhat.com/show_bug.cgi?id=710097 [ 3 ] Bug #710039 - CVE-2011-1959 wireshark: Stack-based buffer over-read from tvbuff buffer when reading snoop capture files https://bugzilla.redhat.com/show_bug.cgi?id=710039 [ 4 ] Bug #710021 - CVE-2011-1957 wireshark: Infinite loop in the DICOM dissector https://bugzilla.redhat.com/show_bug.cgi?id=710021 [ 5 ] Bug #710184 - CVE-2011-1958 wireshark (64bit): NULL pointer dereference by processing of a corrupted Diameter dictionary file https://bugzilla.redhat.com/show_bug.cgi?id=710184 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update wireshark' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-7846 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2175 44449 http://secunia.com/advisories/44449 44958 http://secunia.com/advisories/44958 45149 http://secunia.com/advisories/45149 48066 http://www.securityfocus.com/bid/48066 48947 http://secunia.com/advisories/48947 DSA-2274 http://www.debian.org/security/2011/dsa-2274 FEDORA-2011-7821 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html FEDORA-2011-7846 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061437.html FEDORA-2011-7858 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html RHSA-2013:0125 http://rhn.redhat.com/errata/RHSA-2013-0125.html [oss-security] 20110531 CVE request for Wireshark 1.4.6/1.2.16 Multiple DoS issues http://openwall.com/lists/oss-security/2011/05/31/20 [oss-security] 20110601 Re: CVE request for Wireshark 1.4.6/1.2.16 Multiple DoS issues http://openwall.com/lists/oss-security/2011/06/01/1 http://openwall.com/lists/oss-security/2011/06/01/11 http://anonsvn.wireshark.org/viewvc?view=revision&revision=37128 http://www.wireshark.org/security/wnpa-sec-2011-07.html http://www.wireshark.org/security/wnpa-sec-2011-08.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5934 https://bugzilla.redhat.com/show_bug.cgi?id=710109 oval:org.mitre.oval:def:14645 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14645 Common Vulnerability Exposure (CVE) ID: CVE-2011-2174 http://anonsvn.wireshark.org/viewvc?view=revision&revision=37081 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5908 https://bugzilla.redhat.com/show_bug.cgi?id=710097 oval:org.mitre.oval:def:14777 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14777 wireshark-compressed-packet-dos(67793) https://exchange.xforce.ibmcloud.com/vulnerabilities/67793 Common Vulnerability Exposure (CVE) ID: CVE-2011-1959 http://anonsvn.wireshark.org/viewvc?view=revision&revision=37068 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5912 https://bugzilla.redhat.com/show_bug.cgi?id=710039 oval:org.mitre.oval:def:14656 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14656 wireshark-snoop-dos(67792) https://exchange.xforce.ibmcloud.com/vulnerabilities/67792 Common Vulnerability Exposure (CVE) ID: CVE-2011-1957 http://anonsvn.wireshark.org/viewvc?view=revision&revision=36958 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5876 https://bugzilla.redhat.com/show_bug.cgi?id=710021 oval:org.mitre.oval:def:14325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14325 wireshark-dicom-dos(67790) https://exchange.xforce.ibmcloud.com/vulnerabilities/67790 Common Vulnerability Exposure (CVE) ID: CVE-2011-1958 https://bugzilla.redhat.com/show_bug.cgi?id=710184 oval:org.mitre.oval:def:15045 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15045 wireshark-diameter-dos(67791) https://exchange.xforce.ibmcloud.com/vulnerabilities/67791
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.