What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Wireshark updated

33 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Post #16
FYI…

Wireshark v1.2.2 released
- http://www.wireshark.org/download.html
Sep. 15, 2009 - "The current stable release of Wireshark is 1.2.2. It supersedes all previous releases…"

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…2.html#WhatsNew

- http://www.wireshark.org/news/20090915.html

- http://www.wireshark.org/security/wnpa-sec-2009-06.html
Wireshark 1.2.2 fixes the following vulnerabilities:
* The GSM A RR dissector could crash. (Bug 3893)
Versions affected: 1.2.0 to 1.2.1
* The OpcUa dissector could use excessive CPU and memory. (Bug 3986)
Versions affected: 0.99.6 to 1.0.8, 1.2.0 to 1.2.1
* The TLS dissector could crash on some platforms. (Bug 4008)
Versions affected: 1.2.0 to 1.2.1 …

- http://secunia.com/advisories/36754/2/
Release Date: 2009-09-16
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Wireshark 1.x…
Solution: Update to version 1.0.9 or 1.2.2…
Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2009-05.html
http://www.wireshark.org/security/wnpa-sec-2009-06.html

:ph34r:
Post #17 last edited
FYI…

Wireshark v1.2.3 released
- http://www.wireshark.org/download.html
Oct. 27, 2009 - "The current stable release of Wireshark is 1.2.3. It supersedes all previous releases…"

- http://www.wireshark.org/security/wnpa-sec-2009-07.html
Wireshark 1.2.3 fixes the following vulnerabilities:
• The Paltalk dissector could crash on alignment-sensitive processors…
Versions affected: 1.2.0 to 1.2.2
CVE-2009-3549
• The DCERPC/NT dissector could crash.
Versions affected: 0.10.10 to 1.2.2
CVE-2009-3550
• The SMB dissector could crash.
Versions affected: 1.2.0 to 1.2.2
CVE-2009-3551 …
Resolution: Upgrade to Wireshark 1.2.3 or later…

- http://secunia.com/advisories/37175/2/
Release Date: 2009-10-28
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

:ph34r:
Post #19 last edited
FYI…

Wireshark v1.2.5 released
- http://www.wireshark.org/download.html
Dec. 17, 2009 - "The current stable release of Wireshark is 1.2.5. It supersedes all previous releases…"

Release Notes
- http://www.wireshark.org/docs/relnotes/wir…5.html#WhatsNew

Bug fixes
- http://www.wireshark.org/security/wnpa-sec-2009-09.html
Wireshark 1.2.5 fixes the following vulnerabilities:
• The Daintree SNA file parser could overflow a buffer. (Bug 4294)
Versions affected: 1.2.0 to 1.2.4
• The SMB and SMB2 dissectors could crash. (Bug 4301)
Versions affected: 0.9.0 to 1.2.4
• The IPMI dissector could crash on Windows. (Bug 4319)
Versions affected: 1.2.0 to 1.2.4
Impact
It may be possible to make Wireshark crash remotely or by convincing someone to read a malformed packet trace file.
Resolution
Upgrade to Wireshark 1.2.5 or later. Due to the nature of the Daintree SNA vulnerability, there is no workaround…"

- http://secunia.com/advisories/37842/2/
Release Date: 2009-12-18
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch …
Solution: Update to version 1.2.5…

:ph34r:
Post #20 last edited
FYI…

Wireshark v1.2.6 released
- http://www.wireshark.org/download.html
Jan. 27, 2010 - "The current stable release of Wireshark is 1.2.6. It supersedes all previous releases…"

Release Notes
- http://www.wireshark.org/docs/relnotes/wireshark-1.2.6.html

BugFixes
- http://www.wireshark.org/docs/relnotes/wir…6.html#BugFixes
Babi discovered several buffer overflows in the LWRES dissector.
Versions affected: 0.9.15 to 1.0.10, 1.2.0 to 1.2.5
The following bugs have been fixed:
Wireshark could crash while decrypting Kerberos data.
Address display filters hang Wireshark. (Bug 658)
PSML - structure context node missing. (Bug 1564)
Wireshark doesn't dynamically update the packet list. (Bug 1605)
LUA: There's no tvb_get_stringz() equivalent. (Bug 2244)
tvb_new_real_data is prone to memory leak. (Bug 3917)
Malformed OPC UA traffic makes Wireshark "freeze". (Bug 3986)
Analyze→Expert… doesn't show IP "Bad Checksum" errors. (Bug 4177)
Wireshark can't decrypt WPA(2)-PSK when passphrase is 63 bytes. (Bug 4183)
RTP stream analysis: Wrong jitter values after clicking the refresh button. (Bug 4340)
Wireshark decodes bootp option 2 incorrectly. (Bug 4342)
Deleting SMI modules causes Wireshark to crash. (Bug 4354)
Wireshark decodes kerberos AS-REQ PADATA incorrect. (Bug 4363)
PDML output from TShark includes invalid characters. (Bug 4402)
Empty GPRS LLC S frames cause truncated data exception. (Bug 4417) …

- http://secunia.com/advisories/38257/2/
Release Date: 2010-01-28
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Wireshark 1.x
Solution: Update to version 1.0.11 or 1.2.6.
Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2010-01.html
http://www.wireshark.org/security/wnpa-sec-2010-02.html

:ph34r:
Post #22 last edited
FYI….

Wireshark v1.2.8 released
- http://www.wireshark.org/download.html
May 5, 2010 - The current stable release of Wireshark is 1.2.8…

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…8.html#BugFixes

Security advisory and a workaround
- http://www.wireshark.org/security/wnpa-sec-2010-03.html

- http://www.wireshark.org/security/wnpa-sec-2010-04.html

- http://secunia.com/advisories/39661/
Release Date: 2010-05-06
Criticality level: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Solution: Update to version 1.0.13 or 1.2.8.

:ph34r:
Post #23
FYI…

Wireshark v1.2.9 released
- http://www.wireshark.org/download.html
June 9, 2010 - "The current stable release of Wireshark is 1.2.9…"

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…9.html#BugFixes

- http://secunia.com/advisories/40112/
Release Date: 2010-06-10
Criticality level: Moderately critical
Impact: DoS
Where: From remote
Solution: Update to version 1.0.14 and 1.2.9.
Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2010-05.html
http://www.wireshark.org/security/wnpa-sec-2010-06.html

:ph34r:
Post #24 last edited
FYI…

Wireshark v1.2.10 released
- http://www.wireshark.org/download.html
July 29, 2010 - "The current stable release of Wireshark is 1.2.10. It supersedes all previous releases…"
- http://www.wireshark.org/news/20100729.html

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…0.html#BugFixes

- http://www.wireshark.org/security/wnpa-sec-2010-08.html

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-2992
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-2993
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-2994
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-2995

- http://secunia.com/advisories/40783/
Last update: 2010-08-12
Criticality level: Moderately critical
Impact: DoS, System access
Where: From remote
Solution: Update to version 1.0.15 or 1.2.10.
Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2010-07.html
http://www.wireshark.org/security/wnpa-sec-2010-08.html

- http://securitytracker.com/alerts/2010/Jul/1024269.html
July 31, 2010

:ph34r:
Post #25 last edited
FYI…

Wireshark 1.4.0, 1.2.11, and 1.0.16 released
- http://www.wireshark.org/download.html
August 30, 2010 - "The current stable release of Wireshark is 1.4.0. It supersedes all previous releases…"

Release notes
- http://www.wireshark.org/docs/relnotes/wireshark-1.4.0.html

- http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html

- http://www.wireshark.org/docs/relnotes/wireshark-1.0.16.html

Wireshark 1.4.0, 1.2.11, and 1.0.16 Released
- http://www.wireshark.org/news/20100830.html
"…In 1.2.11 and 1.0.16 - A DLL hijacking bug described in Microsoft Security Advisory 2269637 has been fixed…"

- http://secunia.com/advisories/41064/
Last Update: 2010-08-31
Criticality level: Highly critical
Impact: System access
Where: From remote
Solution: Update to version 1.0.16 or 1.2.11.

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-3133
CVSS v2 Base Score: 9.3 (HIGH)

:ph34r:
Post #26
FYI…

Wireshark v1.4.1/v1.2.2 released
- http://www.wireshark.org/download.html
October 11, 2010 - "The current stable release of Wireshark is 1.4.1. It supersedes all previous releases…"

- http://www.wireshark.org/news/20101011.html
Wireshark 1.4.1 and 1.2.12 Released, 1.0.x EOL

- http://www.wireshark.org/security/wnpa-sec-2010-12.html

Release notes
- http://www.wireshark.org/docs/relnotes/wireshark-1.4.1.html

- http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html

:ph34r:
Post #27 last edited
FYI…

Wireshark v1.4.2/v1.2.13 released
- http://www.wireshark.org/download.html
Nov 19, 2010 - "The current stable release of Wireshark is 1.4.2. It supersedes all previous releases…"

- http://www.wireshark.org/news/20101119.html
Nov 19, 2010 - "Wireshark 1.4.2 and 1.2.13 have been released…"

Fixed in Wireshark 1.4.2
- http://www.wireshark.org/security/wnpa-sec-2010-14.html
Fixed in Wireshark 1.2.13
- http://www.wireshark.org/security/wnpa-sec-2010-13.html

- http://secunia.com/advisories/42290/
Release Date: 2010-11-19
Criticality level: Moderately critical
Impact: DoS
Where: From remote
Solution: Update to version 1.4.2 or 1.2.13.

:ph34r:
Post #28
FYI…

Wireshark v1.4.3 released
- http://www.wireshark.org/download.html
Jan 11, 2011 - "The current stable release of Wireshark is 1.4.3. It supersedes all previous releases…"

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…3.html#BugFixes

Known Problems
- http://www.wireshark.org/docs/relnotes/wir…l#KnownProblems

Wireshark 1.4.3 and 1.2.14 Released
- http://www.wireshark.org/news/20110111.html
Jan 11, 2011

- http://www.wireshark.org/security/wnpa-sec-2011-01.html

- http://www.wireshark.org/security/wnpa-sec-2011-02.html

:ph34r:
Post #29 last edited
FYI…

Wireshark v1.4.4 released
- http://www.wireshark.org/download.html
Mar. 1, 2011 - "The current stable release of Wireshark is 1.4.4. It supersedes all previous releases…"

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…4.html#BugFixes

Known Problems
- http://www.wireshark.org/docs/relnotes/wir…l#KnownProblems

Wireshark 1.4.4 and 1.2.15 Released
- http://www.wireshark.org/news/20110301.html
___

- http://secunia.com/advisories/43554/
Last Update: 2011-03-03
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote…
Solution: Update to version 1.2.15 or 1.4.4.

- http://www.securitytracker.com/id/1025148
Mar 2 2011

:ph34r:
Post #30 last edited
FYI…


Wireshark 1.4.6 has been released. It fixes a bug in the TCP dissector that inadvertently made it into Wireshark 1.4.5.
- http://www.wireshark.org/download.html
4.18.2011
___

Wireshark v1.4.5 released
- http://www.wireshark.org/download.html
4.15.2011 - "The current stable release of Wireshark is 1.4.5…"

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…5.html#BugFixes

Known Problems
- http://www.wireshark.org/docs/relnotes/wir…l#KnownProblems

Wireshark 1.4.5 and 1.2.16 Released
- http://www.wireshark.org/news/20110415.html

- http://secunia.com/advisories/44172/
Release Date: 2011-04-18
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote
Solution: Update to version 1.2.16 and 1.4.5.

:ph34r: