USN-4133-1: Wireshark vulnerabilities

Releases

• Ubuntu 19.04
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• wireshark - network traffic analyzer

Details

It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malformed packets
onto the wire or convincing someone to read a malformed packet trace file.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04

• libwireshark-data - 2.6.10-1~ubuntu19.04.0
• libwireshark11 - 2.6.10-1~ubuntu19.04.0
• libwiretap8 - 2.6.10-1~ubuntu19.04.0
• libwscodecs2 - 2.6.10-1~ubuntu19.04.0
• libwsutil9 - 2.6.10-1~ubuntu19.04.0
• tshark - 2.6.10-1~ubuntu19.04.0
• wireshark - 2.6.10-1~ubuntu19.04.0
• wireshark-common - 2.6.10-1~ubuntu19.04.0
• wireshark-gtk - 2.6.10-1~ubuntu19.04.0
• wireshark-qt - 2.6.10-1~ubuntu19.04.0

Ubuntu 18.04

• libwireshark-data - 2.6.10-1~ubuntu18.04.0
• libwireshark11 - 2.6.10-1~ubuntu18.04.0
• libwiretap8 - 2.6.10-1~ubuntu18.04.0
• libwscodecs2 - 2.6.10-1~ubuntu18.04.0
• libwsutil9 - 2.6.10-1~ubuntu18.04.0
• tshark - 2.6.10-1~ubuntu18.04.0
• wireshark - 2.6.10-1~ubuntu18.04.0
• wireshark-common - 2.6.10-1~ubuntu18.04.0
• wireshark-gtk - 2.6.10-1~ubuntu18.04.0
• wireshark-qt - 2.6.10-1~ubuntu18.04.0

Ubuntu 16.04

• libwireshark-data - 2.6.10-1~ubuntu16.04.0
• libwireshark11 - 2.6.10-1~ubuntu16.04.0
• libwiretap8 - 2.6.10-1~ubuntu16.04.0
• libwscodecs2 - 2.6.10-1~ubuntu16.04.0
• libwsutil9 - 2.6.10-1~ubuntu16.04.0
• tshark - 2.6.10-1~ubuntu16.04.0
• wireshark - 2.6.10-1~ubuntu16.04.0
• wireshark-common - 2.6.10-1~ubuntu16.04.0
• wireshark-gtk - 2.6.10-1~ubuntu16.04.0
• wireshark-qt - 2.6.10-1~ubuntu16.04.0

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

• CVE-2019-12295
• CVE-2019-13619