Security update for wireshark SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0867-1 Final 1 1 2018-04-03T16:43:26Z current 2018-04-03T16:43:26Z 2018-04-03T16:43:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wireshark This update for wireshark fixes the following issues: Security issue fixed (bsc#1082692): - CVE-2018-7335: The IEEE 802.11 dissector could crash (wnpa-sec-2018-05) - CVE-2018-7321: thrift long dissector loop (dissect_thrift_map) - CVE-2018-7322: DICOM: inifinite loop (dissect_dcm_tag) - CVE-2018-7323: WCCP: very long loop (dissect_wccp2_alternate_mask_value_set_element) - CVE-2018-7324: SCCP: infinite loop (dissect_sccp_optional_parameters) - CVE-2018-7325: RPKI-Router Protocol: infinite loop (dissect_rpkirtr_pdu) - CVE-2018-7326: LLTD: infinite loop (dissect_lltd_tlv) - CVE-2018-7327: openflow_v6: infinite loop (dissect_openflow_bundle_control_v6) - CVE-2018-7328: USB-DARWIN: long loop (dissect_darwin_usb_iso_transfer) - CVE-2018-7329: S7COMM: infinite loop (s7comm_decode_ud_cpu_alarm_main) - CVE-2018-7330: thread_meshcop: infinite loop (get_chancount) - CVE-2018-7331: GTP: infinite loop (dissect_gprscdr_GGSNPDPRecord, dissect_ber_set) - CVE-2018-7332: RELOAD: infinite loop (dissect_statans) - CVE-2018-7333: RPCoRDMA: infinite loop in get_write_list_chunk_count - CVE-2018-7421: Multiple dissectors could go into large infinite loops (wnpa-sec-2018-06) - CVE-2018-7334: The UMTS MAC dissector could crash (wnpa-sec-2018-07) - CVE-2018-7337: The DOCSIS dissector could crash (wnpa-sec-2018-08) - CVE-2018-7336: The FCP dissector could crash (wnpa-sec-2018-09) - CVE-2018-7320: The SIGCOMP dissector could crash (wnpa-sec-2018-10) - CVE-2018-7420: The pcapng file parser could crash (wnpa-sec-2018-11) - CVE-2018-7417: The IPMI dissector could crash (wnpa-sec-2018-12) - CVE-2018-7418: The SIGCOMP dissector could crash (wnpa-sec-2018-13) - CVE-2018-7419: The NBAP disssector could crash (wnpa-sec-2018-14) - CVE-2017-17997: Misuse of NULL pointer in MRDISC dissector (bsc#1077080). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-wireshark-13547,slessp4-wireshark-13547 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ Link for SUSE-SU-2018:0867-1 https://lists.suse.com/pipermail/sle-security-updates/2018-April/003868.html E-Mail link for SUSE-SU-2018:0867-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077080 SUSE Bug 1077080 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 https://www.suse.com/security/cve/CVE-2017-17997/ SUSE CVE CVE-2017-17997 page https://www.suse.com/security/cve/CVE-2018-7320/ SUSE CVE CVE-2018-7320 page https://www.suse.com/security/cve/CVE-2018-7321/ SUSE CVE CVE-2018-7321 page https://www.suse.com/security/cve/CVE-2018-7322/ SUSE CVE CVE-2018-7322 page https://www.suse.com/security/cve/CVE-2018-7323/ SUSE CVE CVE-2018-7323 page https://www.suse.com/security/cve/CVE-2018-7324/ SUSE CVE CVE-2018-7324 page https://www.suse.com/security/cve/CVE-2018-7325/ SUSE CVE CVE-2018-7325 page https://www.suse.com/security/cve/CVE-2018-7326/ SUSE CVE CVE-2018-7326 page https://www.suse.com/security/cve/CVE-2018-7327/ SUSE CVE CVE-2018-7327 page https://www.suse.com/security/cve/CVE-2018-7328/ SUSE CVE CVE-2018-7328 page https://www.suse.com/security/cve/CVE-2018-7329/ SUSE CVE CVE-2018-7329 page https://www.suse.com/security/cve/CVE-2018-7330/ SUSE CVE CVE-2018-7330 page https://www.suse.com/security/cve/CVE-2018-7331/ SUSE CVE CVE-2018-7331 page https://www.suse.com/security/cve/CVE-2018-7332/ SUSE CVE CVE-2018-7332 page https://www.suse.com/security/cve/CVE-2018-7333/ SUSE CVE CVE-2018-7333 page https://www.suse.com/security/cve/CVE-2018-7334/ SUSE CVE CVE-2018-7334 page https://www.suse.com/security/cve/CVE-2018-7335/ SUSE CVE CVE-2018-7335 page https://www.suse.com/security/cve/CVE-2018-7336/ SUSE CVE CVE-2018-7336 page https://www.suse.com/security/cve/CVE-2018-7337/ SUSE CVE CVE-2018-7337 page https://www.suse.com/security/cve/CVE-2018-7417/ SUSE CVE CVE-2018-7417 page https://www.suse.com/security/cve/CVE-2018-7418/ SUSE CVE CVE-2018-7418 page https://www.suse.com/security/cve/CVE-2018-7419/ SUSE CVE CVE-2018-7419 page https://www.suse.com/security/cve/CVE-2018-7420/ SUSE CVE CVE-2018-7420 page https://www.suse.com/security/cve/CVE-2018-7421/ SUSE CVE CVE-2018-7421 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libwireshark8-2.2.13-40.22.1 libwiretap6-2.2.13-40.22.1 libwscodecs1-2.2.13-40.22.1 libwsutil7-2.2.13-40.22.1 wireshark-2.2.13-40.22.1 wireshark-devel-2.2.13-40.22.1 wireshark-gtk-2.2.13-40.22.1 libwireshark8-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 libwiretap6-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 libwscodecs1-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 libwsutil7-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 wireshark-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 wireshark-gtk-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server 11 SP4 libwireshark8-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwiretap6-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwscodecs1-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwsutil7-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 wireshark-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 wireshark-gtk-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwireshark8-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libwiretap6-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libwscodecs1-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libwsutil7-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 wireshark-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 wireshark-devel-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 wireshark-gtk-2.2.13-40.22.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343. CVE-2017-17997 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2017-17997.html CVE-2017-17997 https://bugzilla.suse.com/1077080 SUSE Bug 1077080 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets. CVE-2018-7320 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7320.html CVE-2018-7320 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type. CVE-2018-7321 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7321.html CVE-2018-7321 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for integer wraparound. CVE-2018-7322 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7322.html CVE-2018-7322 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing. CVE-2018-7323 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7323.html CVE-2018-7323 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type. CVE-2018-7324 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7324.html CVE-2018-7324 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a length field. CVE-2018-7325 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7325.html CVE-2018-7325 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type. CVE-2018-7326 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7326.html CVE-2018-7326 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths. CVE-2018-7327 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7327.html CVE-2018-7327 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths. CVE-2018-7328 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7328.html CVE-2018-7328 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors. CVE-2018-7329 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7329.html CVE-2018-7329 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type. CVE-2018-7330 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7330.html CVE-2018-7330 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length. CVE-2018-7331 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7331.html CVE-2018-7331 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length. CVE-2018-7332 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7332.html CVE-2018-7332 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size. CVE-2018-7333 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7333.html CVE-2018-7333 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umts_mac.c by rejecting a certain reserved value. CVE-2018-7334 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7334.html CVE-2018-7334 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small. CVE-2018-7335 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7335.html CVE-2018-7335 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a NULL pointer. CVE-2018-7336 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7336.html CVE-2018-7336 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs. CVE-2018-7337 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7337.html CVE-2018-7337 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header. CVE-2018-7417 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7417.html CVE-2018-7417 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value. CVE-2018-7418 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7418.html CVE-2018-7418 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization. CVE-2018-7419 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7419.html CVE-2018-7419 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a block-size check for sysdig event blocks. CVE-2018-7420 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7420.html CVE-2018-7420 https://bugzilla.suse.com/1082692 SUSE Bug 1082692 In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification. CVE-2018-7421 SUSE Linux Enterprise Server 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-gtk-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwireshark8-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwiretap6-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwscodecs1-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libwsutil7-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-2.2.13-40.22.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-gtk-2.2.13-40.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180867-1/ https://www.suse.com/security/cve/CVE-2018-7421.html CVE-2018-7421 https://bugzilla.suse.com/1082692 SUSE Bug 1082692