Security update for wireshark SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2033-1 Final 1 1 2017-08-03T08:45:53Z current 2017-08-03T08:45:53Z 2017-08-03T08:45:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wireshark This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed: - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. (bsc#1049621) - CVE-2017-11410: The WBXML dissector could go into an infinite loop. (bsc#1049255) - CVE-2017-11408: The AMQP dissector could crash. (bsc#1049255) - CVE-2017-11407: The MQ dissector could crash. (bsc#1049255) - CVE-2017-11406: The DOCSIS dissector could go into an infinite loop. (bsc#1049255) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2017-1248,SUSE-SLE-DESKTOP-12-SP3-2017-1248,SUSE-SLE-RPI-12-SP2-2017-1248,SUSE-SLE-SDK-12-SP2-2017-1248,SUSE-SLE-SDK-12-SP3-2017-1248,SUSE-SLE-SERVER-12-SP2-2017-1248,SUSE-SLE-SERVER-12-SP3-2017-1248 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ Link for SUSE-SU-2017:2033-1 https://lists.suse.com/pipermail/sle-security-updates/2017-August/003079.html E-Mail link for SUSE-SU-2017:2033-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049255 SUSE Bug 1049255 https://bugzilla.suse.com/1049621 SUSE Bug 1049621 https://www.suse.com/security/cve/CVE-2017-11406/ SUSE CVE CVE-2017-11406 page https://www.suse.com/security/cve/CVE-2017-11407/ SUSE CVE CVE-2017-11407 page https://www.suse.com/security/cve/CVE-2017-11408/ SUSE CVE CVE-2017-11408 page https://www.suse.com/security/cve/CVE-2017-11410/ SUSE CVE CVE-2017-11410 page https://www.suse.com/security/cve/CVE-2017-11411/ SUSE CVE CVE-2017-11411 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 libwireshark8-2.2.8-48.6.1 libwiretap6-2.2.8-48.6.1 libwscodecs1-2.2.8-48.6.1 libwsutil7-2.2.8-48.6.1 wireshark-2.2.8-48.6.1 wireshark-gtk-2.2.8-48.6.1 wireshark-devel-2.2.8-48.6.1 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwireshark8-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libwiretap6-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libwscodecs1-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libwsutil7-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 wireshark-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 wireshark-gtk-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 wireshark-devel-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 wireshark-devel-2.2.8-48.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values. CVE-2017-11406 SUSE Linux Enterprise Desktop 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:wireshark-devel-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:wireshark-devel-2.2.8-48.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ https://www.suse.com/security/cve/CVE-2017-11406.html CVE-2017-11406 https://bugzilla.suse.com/1049255 SUSE Bug 1049255 In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt. CVE-2017-11407 SUSE Linux Enterprise Desktop 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:wireshark-devel-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:wireshark-devel-2.2.8-48.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ https://www.suse.com/security/cve/CVE-2017-11407.html CVE-2017-11407 https://bugzilla.suse.com/1049255 SUSE Bug 1049255 In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection. CVE-2017-11408 SUSE Linux Enterprise Desktop 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:wireshark-devel-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:wireshark-devel-2.2.8-48.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ https://www.suse.com/security/cve/CVE-2017-11408.html CVE-2017-11408 https://bugzilla.suse.com/1049255 SUSE Bug 1049255 In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702. CVE-2017-11410 SUSE Linux Enterprise Desktop 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:wireshark-devel-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:wireshark-devel-2.2.8-48.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ https://www.suse.com/security/cve/CVE-2017-11410.html CVE-2017-11410 https://bugzilla.suse.com/1033938 SUSE Bug 1033938 https://bugzilla.suse.com/1049255 SUSE Bug 1049255 In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350. CVE-2017-11411 SUSE Linux Enterprise Desktop 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Desktop 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwireshark8-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwiretap6-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwscodecs1-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwsutil7-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-2.2.8-48.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:wireshark-gtk-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:wireshark-devel-2.2.8-48.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:wireshark-devel-2.2.8-48.6.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172033-1/ https://www.suse.com/security/cve/CVE-2017-11411.html CVE-2017-11411 https://bugzilla.suse.com/1049255 SUSE Bug 1049255 https://bugzilla.suse.com/1049621 SUSE Bug 1049621