Errata overview
Errata ID 413
Date 2018-05-08
Source package wireshark
Fixed in version 1.12.1+g01b65bf-4+deb8u13
Description
This update addresses the following issues:
* The AMQP dissector could crash. This was addressed in
  epan/dissectors/packet-amqp.c by checking for successful list dissection.
  (CVE-2017-11408)
* The NetBIOS dissector could crash. This was addressed in
  epan/dissectors/packet-netbios.c by ensuring that write operations are
  bounded by the beginning of a buffer. (CVE-2017-17083)
* The IWARP_MPA dissector could crash. This was addressed in
  epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
  (CVE-2017-17084)
* The CIP Safety dissector could crash. This was addressed in
  epan/dissectors/packet-cipsafety.c by validating the packet length.
  (CVE-2017-17085)
* The IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c
  by correcting the signature timestamp bounds checks. (CVE-2018-5334)
* The WCP dissector could crash. This was addressed in
  epan/dissectors/packet-wcp.c by validating the available buffer length.
  (CVE-2018-5335)
* The JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was
  addressed in epan/tvbparse.c by limiting the recursion depth.
  (CVE-2018-5336)
Additional notes
CVE ID CVE-2017-11408
CVE-2017-17083
CVE-2017-17084
CVE-2017-17085
CVE-2018-5334
CVE-2018-5335
CVE-2018-5336
UCS Bug number #46164