Skip to content

GitLab

aports
aports
Closed
Opened by Alicha CH@alichaReporter

wireshark: Multiple vulnerabilities (CVE-2018-16056, CVE-2018-16057, CVE-2018-16058)

CVE-2018-16056: Bluetooth Attribute Protocol dissector crash

Affected versions: 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, 2.2.0 to 2.2.16
Fixed versions: 2.6.3, 2.4.9, 2.2.17

References:

https://www.wireshark.org/security/wnpa-sec-2018-45.html
https://bugs.wireshark.org/bugzilla/show\_bug.cgi?id=14994

CVE-2018-16057: Radiotap dissector crash

Affected versions: 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, 2.2.0 to 2.2.16
Fixed versions: 2.6.3, 2.4.9, 2.2.17

References:

https://www.wireshark.org/security/wnpa-sec-2018-46.html
https://bugs.wireshark.org/bugzilla/show\_bug.cgi?id=15022

CVE-2018-16058: Bluetooth AVDTP dissector crash

Affected versions: 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, 2.2.0 to 2.2.16
Fixed versions: 2.6.3, 2.4.9, 2.2.17

References:

https://www.wireshark.org/security/wnpa-sec-2018-44.html
https://bugs.wireshark.org/bugzilla/show\_bug.cgi?id=14884

(from redmine: issue id 9404, created on 2018-09-10, closed on 2018-09-11)

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information