[Secure-testing-team] Bug#769410: wireshark: CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714

Salvatore Bonaccorso carnil at debian.org
Thu Nov 13 13:49:09 UTC 2014


Source: wireshark
Version: 1.12.1+g01b65bf-1
Severity: important
Tags: security upstream fixed-upstream

Hi,

the following vulnerabilities were published for wireshark.

CVE-2014-8710[0]:
SigComp dissector crash

CVE-2014-8711[1]:
AMQP dissector crash

CVE-2014-8712[2]:
NCP dissector crashes

CVE-2014-8713[3]:
NCP dissector crashes

CVE-2014-8714[4]:
TN5250 infinite loop

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-8710
[1] https://security-tracker.debian.org/tracker/CVE-2014-8711
[2] https://security-tracker.debian.org/tracker/CVE-2014-8712
[3] https://security-tracker.debian.org/tracker/CVE-2014-8713
[4] https://security-tracker.debian.org/tracker/CVE-2014-8714

Regards,
Salvatore



More information about the Secure-testing-team mailing list