USN-3986-1: Wireshark vulnerabilities

Releases

• Ubuntu 18.10
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• wireshark - network traffic analyzer

Details

It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malform packets onto
the wire or convincing someone to read a malformed packet trace file.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.10

• libwireshark-data - 2.6.8-1~ubuntu18.10.0
• libwireshark11 - 2.6.8-1~ubuntu18.10.0
• libwiretap8 - 2.6.8-1~ubuntu18.10.0
• libwscodecs2 - 2.6.8-1~ubuntu18.10.0
• libwsutil9 - 2.6.8-1~ubuntu18.10.0
• tshark - 2.6.8-1~ubuntu18.10.0
• wireshark - 2.6.8-1~ubuntu18.10.0
• wireshark-common - 2.6.8-1~ubuntu18.10.0
• wireshark-gtk - 2.6.8-1~ubuntu18.10.0
• wireshark-qt - 2.6.8-1~ubuntu18.10.0

Ubuntu 18.04

• libwireshark-data - 2.6.8-1~ubuntu18.04.0
• libwireshark11 - 2.6.8-1~ubuntu18.04.0
• libwiretap8 - 2.6.8-1~ubuntu18.04.0
• libwscodecs2 - 2.6.8-1~ubuntu18.04.0
• libwsutil9 - 2.6.8-1~ubuntu18.04.0
• tshark - 2.6.8-1~ubuntu18.04.0
• wireshark - 2.6.8-1~ubuntu18.04.0
• wireshark-common - 2.6.8-1~ubuntu18.04.0
• wireshark-gtk - 2.6.8-1~ubuntu18.04.0
• wireshark-qt - 2.6.8-1~ubuntu18.04.0

Ubuntu 16.04

• libwireshark-data - 2.6.8-1~ubuntu16.04.0
• libwireshark11 - 2.6.8-1~ubuntu16.04.0
• libwiretap8 - 2.6.8-1~ubuntu16.04.0
• libwscodecs2 - 2.6.8-1~ubuntu16.04.0
• libwsutil9 - 2.6.8-1~ubuntu16.04.0
• tshark - 2.6.8-1~ubuntu16.04.0
• wireshark - 2.6.8-1~ubuntu16.04.0
• wireshark-common - 2.6.8-1~ubuntu16.04.0
• wireshark-gtk - 2.6.8-1~ubuntu16.04.0
• wireshark-qt - 2.6.8-1~ubuntu16.04.0

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-10894
• CVE-2019-10895
• CVE-2019-10896
• CVE-2019-10899
• CVE-2019-10901
• CVE-2019-10903
• CVE-2019-9208
• CVE-2019-9209
• CVE-2019-9214