MGASA-2013-0236

Source
https://advisories.mageia.org/MGASA-2013-0236.html
Import Source
https://advisories.mageia.org/MGASA-2013-0236.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2013-0236
Related
Published
2013-07-29T14:00:22Z
Modified
2013-07-29T14:00:18Z
Summary
Updated wireshark package fixes security vulnerabilities
Details

The Bluetooth SDP dissector could go into a large loop (CVE-2013-4927). The DIS dissector could go into a large loop (CVE-2013-4929). The DVB-CI dissector could crash (CVE-2013-4930). The GSM RR dissector (and possibly others) could go into a large loop (CVE-2013-4931). The GSM A Common dissector could crash (CVE-2013-4932). The Netmon file parser could crash (CVE-2013-4933, CVE-2013-4934). The ASN.1 PER dissector could crash (CVE-2013-4935).

References
Credits

Affected packages

Mageia:2 / wireshark

Package

Name
wireshark
Purl
pkg:rpm/mageia/wireshark?distro=mageia-2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.16-1.1.mga2

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / wireshark

Package

Name
wireshark
Purl
pkg:rpm/mageia/wireshark?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.9-1.mga3

Ecosystem specific

{
    "section": "core"
}