[ GLSA 201406-33 ] Wireshark: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Wireshark: Multiple vulnerabilities (GLSA 201406-33)
Severity: normal
Exploitable: remote
Date: June 29, 2014
Bug(s): #503792, #507298, #508506, #513094
ID: 201406-33

Synopsis

Multiple vulnerabilities have been found in Wireshark, the worst of
which allows remote attackers to execute arbitrary code.


Background

Wireshark is a network protocol analyzer formerly known as ethereal.

Affected Packages

Package: net-analyzer/wireshark
Vulnerable: < 1.10.8
Unaffected: >= 1.8.15 < 1.8.16
Unaffected: >= 1.10.8
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Wireshark. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker can cause arbitrary code execution or a Denial of
Service condition via a specially crafted packet.


Workaround

There is no known workaround at this time.

Resolution

All Wireshark 1.8.x users should upgrade to the latest version: