This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Wireshark updated

33 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

Wireshark v1.4.7 released
- http://www.wireshark.org/download.html
May 31, 2011 - "The current stable release of Wireshark is 1.4.7. It supersedes all previous releases…"

Release Notes
- http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html

Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…7.html#BugFixes

- http://www.wireshark.org/security/wnpa-sec-2011-08.html

- http://secunia.com/advisories/44449/
Release Date: 2011-06-01
Criticality level: Moderately critical
Impact: DoS
Where: From remote
Solution: Update to version 1.2.17 or 1.4.7.

- http://www.securitytracker.com/id/1025597
Jun 2 2011

:ph34r:
FYI…

Wireshark v1.6.1 released
- http://www.wireshark.org/download.html
18 Jul 2011 - "The current stable release of Wireshark is 1.6.1. It supersedes all previous releases…"

What's New / Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…1.html#WhatsNew

- http://www.wireshark.org/security/wnpa-sec-2011-11.html

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-2597

Also: Wireshark 1.4.8 is now available
- http://www.wireshark.org/lists/wireshark-a…7/msg00001.html
18 Jul 2011

What's New / Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…8.html#WhatsNew
___

- http://secunia.com/advisories/45086/
Last Update: 2011-07-19
Criticality level: Moderately critical
Impact: DoS
Where: From remote

:ph34r:
FYI…

Wireshark v1.6.2 released
- http://www.wireshark.org/download.html
7 Sep 2011 - "The current stable release of Wireshark is 1.6.2. It supersedes all previous releases…"
What's New / Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…2.html#WhatsNew

Also: Wireshark 1.4.9 is now available
- http://www.wireshark.org/lists/wireshark-a…9/msg00001.html
7 Sep 2011
What's New / Bug Fixes
- http://www.wireshark.org/docs/relnotes/wir…9.html#WhatsNew
___

- http://www.securitytracker.com/id/1026030
Sep 8 2011
… vendor has issued a fix (1.4.9, 1.6.2)…
http://www.wireshark.org/security/wnpa-sec-2011-12.html
http://www.wireshark.org/security/wnpa-sec-2011-14.html
http://www.wireshark.org/security/wnpa-sec-2011-15.html
http://www.wireshark.org/security/wnpa-sec-2011-16.html

- https://secunia.com/advisories/45927/
Release Date: 2011-09-09
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote
CVE Reference: CVE-2011-3266
Solution: Update to versions 1.4.9 or 1.6.2.

:ph34r:
FYI…

Wireshark v1.6.3 released
- https://www.wireshark.org/download.html
Nov. 1, 2011 - "The current stable release of Wireshark is 1.6.3. It supersedes all previous releases…"

What's New - Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…3.html#WhatsNew

- https://www.wireshark.org/security/wnpa-sec-2011-17.html

- https://www.wireshark.org/security/wnpa-sec-2011-18.html

- https://www.wireshark.org/security/wnpa-sec-2011-19.html
___

- https://secunia.com/advisories/46644/
Release Date: 2011-11-02
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote…
Solution: Update to version 1.6.3 or 1.4.10.
___

Wireshark v1.4.10 released
- https://www.wireshark.org/lists/wireshark-a…1/msg00001.html

:ph34r: :ph34r:
FYI…

Wireshark v1.6.4 released
- https://www.wireshark.org/download.html
Nov. 18, 2011 - "The current stable release of Wireshark is 1.6.4. It supersedes all previous releases…"

Release Notes:
- https://www.wireshark.org/docs/relnotes/wir…4.html#BugFixes

- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5575
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6503
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6537
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6540
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6548
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6564
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6570

:ph34r:
FYI…

Wireshark v1.6.6 released
- https://www.wireshark.org/download.html
Mar 27, 2012 - "The current stable release of Wireshark is 1.6.6…"

Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…6.html#BugFixes

Wireshark 1.4.12 is now available
- https://www.wireshark.org/lists/wireshark-a…3/msg00001.html
___

- https://secunia.com/advisories/48548/
Release Date: 2012-03-28
Criticality level: Moderately critical
Impact: DoS
Where: From remote…
Solution: Update to version 1.4.12 or 1.6.6.

:ph34r:
FYI…

Wireshark v1.6.8 released
- https://www.wireshark.org/download.html
May 22, 2012 - "The current stable release of Wireshark is 1.6.8. It supersedes all previous releases…"

BugFixes
- https://www.wireshark.org/docs/relnotes/wir…8.html#BugFixes

- https://www.wireshark.org/lists/wireshark-a…5/msg00000.html
___

Wireshark v1.4.13 released
- https://www.wireshark.org/lists/wireshark-a…5/msg00001.html

Bug Fixes:
The following vulnerabilities have been fixed.
o wnpa-sec-2012-08
Infinite and large loops in the ANSI MAP, BACapp, Bluetooth HCI, IEEE 802.3, LTP, and R3 dissectors have been fixed.
Discovered by Laurent Butti. (Bugs 7118, 7119, 7121, 7122, 7124, 7125)
Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
o wnpa-sec-2012-09
The DIAMETER dissector could try to allocate memory improperly and crash. (Bug 7138)
Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
o wnpa-sec-2012-10
Wireshark could crash on SPARC processors due to misaligned memory. Discovered by Klaus Heckelmann. (Bug 7221)
Versions affected: 1.4.0 to 1.4.12, 1.6.0 to 1.6.7.
The following bugs have been fixed:
o User-Password - PAP decoding passwords longer than 16 bytes. (Bug 6779)
o Wireshark error message for failure to open an rpcap: URL for a remote device is malformed. (Bug 6922)
o Wireshark doesn't calculate the right IPv4 destination using source routing options when bad options precede them. (Bug 7043)
o Wrong values in DNS CERT RR. (Bug 7130)…

:ph34r: :ph34r:
FYI…

Wireshark v1.8.1 released
- https://www.wireshark.org/download.html
July 23, 2012 - "The current stable release of Wireshark is 1.8.1. It supersedes all previous releases…"

Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…1.html#BugFixes

- https://www.wireshark.org/lists/wireshark-a…7/msg00001.html

- https://www.wireshark.org/lists/wireshark-a…7/msg00002.html
Wireshark 1.6.9 is now available…
- https://www.wireshark.org/docs/relnotes/wireshark-1.6.9.html

Wireshark Q&A
>> http://ask.wireshark.org/
___

- https://secunia.com/advisories/49971/
Release Date: 2012-07-24
Criticality level: Moderately critical
Impact: DoS
Where: From remote…
CVE Reference(s):
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2012-4048
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2012-4049
Solution: Update to version 1.8.1, 1.6.9, or 1.4.14.

:ph34r:
FYI…

Wireshark v1.8.2 released
- https://www.wireshark.org/download.html
15 Aug 2012 - "The current stable release of Wireshark is 1.8.2. It supersedes all previous releases…"

What's New/Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…2.html#WhatsNew

> https://www.wireshark.org/lists/wireshark-a…8/msg00002.html
___

- https://isc.sans.edu/diary.html?storyid=13909
Last Updated: 2012-08-15

- http://www.securitytracker.com/id/1027404
CVE Reference: CVE-2012-4285, CVE-2012-4286, CVE-2012-4287, CVE-2012-4288, CVE-2012-4289, CVE-2012-4290, CVE-2012-4291, CVE-2012-4292, CVE-2012-4293, CVE-2012-4294, CVE-2012-4295, CVE-2012-4296, CVE-2012-4297, CVE-2012-4298
Aug 15 2012
Version(s): prior to versions 1.4.15, 1.6.10, 1.8.2
Description: Multiple vulnerability were reported in Wireshark. A remote user can execute arbitrary code on the target system. A remote user can cause denial of service conditions…
Impact: A remote user can execute arbitrary code on the target system…
Solution: The vendor has issued a fix (1.4.15, 1.6.10, 1.8.2)…

- https://secunia.com/advisories/50276/
Release Date: 2012-08-16
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote
… vulnerabilities are reported in versions prior to 1.8.2, 1.6.10, and 1.4.15.
Solution: Update to version 1.8.2, 1.6.10, or 1.4.15.
___

Support for the 1.4.x series of releases ended on August 30, 2012
- http://wiki.wireshark.org/Development/LifeCycle
See: End of Life planning

:ph34r:
FYI…

Wireshark v1.8.3 released
- https://www.wireshark.org/download.html
02 Oct 2012 - "The current stable release of Wireshark is 1.8.3. It supersedes all previous releases…"

What's New/Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…3.html#WhatsNew

> https://www.wireshark.org/lists/wireshark-a…0/msg00000.html
- CVE-2012-5237, CVE-2012-5238, CVE-2012-5239, CVE-2012-5240

- https://secunia.com/advisories/50843/
Release Date: 2012-10-03
Criticality level: Highly critical
Impact: DoS, System access
Where: From remote
…vulnerabilities are reported in versions prior to 1.8.3.
Solution: Update to version 1.8.3.
Original Advisory:
https://www.wireshark.org/security/wnpa-sec-2012-26.html
https://www.wireshark.org/security/wnpa-sec-2012-27.html
https://www.wireshark.org/security/wnpa-sec-2012-28.html
https://www.wireshark.org/security/wnpa-sec-2012-29.html
___

Wireshark v1.6.11 released
- https://www.wireshark.org/lists/wireshark-a…0/msg00001.html
- CVE-2012-5239

What's New/Bug Fixes
- https://www.wireshark.org/docs/relnotes/wir…1.html#WhatsNew

:ph34r: