Linux · Ubuntu · Package update · August 29, 2018

libwireshark11 2.6.3-1~ubuntu18.04.1: libwireshark11 2.6.3-1~ubuntu18.04.1 for Ubuntu 18.04.6 LTS (bionic)

libwireshark11 2.6.3-1~ubuntu18.04.1, released August 29, 2018, fixes 190 CVEs in libwireshark11. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
190
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.1666
97th percentile

Priority of the 190 CVEs

Patch now 0 Urgent 0 High 0 Routine 190

Fixed package versions

ProductReleaseFixed in
libwireshark11Ubuntu 18.04.6 LTS (bionic)2.6.3-1~ubuntu18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-17085 libwireshark11: In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crashn/a 0.1666 None reported
Routine CVE-2017-9353 wireshark-qt: In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crashn/a 0.1401 None reported
Routine CVE-2017-9347 libwireshark11: In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereferencen/a 0.1384 None reported
Routine CVE-2016-6512 libwireshark11: epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function,...n/a 0.0760 None reported
Routine CVE-2014-5116 wireshark: The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent at...n/a 0.0758 None reported
Routine CVE-2015-8740 libwireshark11: The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x b...n/a 0.0668 None reported
Routine CVE-2015-0561 wireshark-qt: asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a...n/a 0.0561 None reported
Routine CVE-2015-8725 libwireshark11: The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector...n/a 0.0516 None reported
Routine CVE-2015-8728 libwireshark11: The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/pac...n/a 0.0467 None reported
Routine CVE-2015-2189 libwireshark11: Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before...n/a 0.0460 None reported
Routine CVE-2015-8732 libwireshark11: The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL diss...n/a 0.0447 None reported
Routine CVE-2015-2188 libwireshark11: epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does no...n/a 0.0439 None reported
Routine CVE-2015-8726 libwireshark11: wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate...n/a 0.0436 None reported
Routine CVE-2015-8736 libwireshark11: The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not re...n/a 0.0434 None reported
Routine CVE-2015-8730 libwireshark11: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not...n/a 0.0420 None reported
Routine CVE-2015-8727 libwireshark11: The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1....n/a 0.0416 None reported
Routine CVE-2015-8735 libwireshark11: The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wiresha...n/a 0.0414 None reported
Routine CVE-2015-8739 libwireshark11: The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1...n/a 0.0414 None reported
Routine CVE-2015-8729 libwireshark11: The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0....n/a 0.0410 None reported
Routine CVE-2015-8733 libwireshark11: The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1....n/a 0.0410 None reported
Routine CVE-2015-2191 libwireshark11: Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.1...n/a 0.0389 None reported
Routine CVE-2018-14368 libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infi...n/a 0.0380 None reported
Routine CVE-2014-8713 wireshark: Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissec...n/a 0.0379 None reported
Routine CVE-2018-14342 libwireshark11: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loopn/a 0.0372 None reported
Routine CVE-2015-3812 libwireshark11: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wires...n/a 0.0367 None reported
Showing 1 to 25 of 190 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.