svn commit: r414494 - head/security/vuxml

Mon May 2 23:59:01 UTC 2016

Author: junovitch
Date: Mon May  2 23:58:59 2016
New Revision: 414494
URL: https://svnweb.freebsd.org/changeset/ports/414494

Log:
  Document denial of service advisories from Wireshark's recent release
  
  Security:	https://vuxml.FreeBSD.org/freebsd/7e36c369-10c0-11e6-94fa-002590263bf5.html

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Mon May  2 23:48:02 2016	(r414493)
+++ head/security/vuxml/vuln.xml	Mon May  2 23:58:59 2016	(r414494)
@@ -58,6 +58,59 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="7e36c369-10c0-11e6-94fa-002590263bf5">
+    <topic>wireshark -- multiple vulnerabilities</topic>
+    <affects>
+      <package>
+	<name>wireshark</name>
+	<name>wireshark-lite</name>
+	<name>wireshark-qt5</name>
+	<name>tshark</name>
+	<name>tshark-lite</name>
+	<range><lt>2.0.3</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Wireshark development team reports:</p>
+	<blockquote cite="https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html">
+	  <p>The following vulnerabilities have been fixed:</p>
+	  <ul>
+	    <li><p>wnpa-sec-2016-19</p>
+	      <p>The NCP dissector could crash. (Bug 11591)</p></li>
+	    <li><p>wnpa-sec-2016-20</p>
+	      <p>TShark could crash due to a packet reassembly bug. (Bug 11799)
+		</p></li>
+	    <li><p>wnpa-sec-2016-21</p>
+	      <p>The IEEE 802.11 dissector could crash. (Bug 11824, Bug 12187)
+		</p></li>
+	    <li><p>wnpa-sec-2016-22</p>
+	      <p>The PKTC dissector could crash. (Bug 12206)</p></li>
+	    <li><p>wnpa-sec-2016-23</p>
+	      <p>The PKTC dissector could crash. (Bug 12242)</p></li>
+	    <li><p>wnpa-sec-2016-24</p>
+	      <p>The IAX2 dissector could go into an infinite loop. (Bug
+		12260)</p></li>
+	    <li><p>wnpa-sec-2016-25</p>
+	      <p>Wireshark and TShark could exhaust the stack. (Bug 12268)</p>
+		</li>
+	    <li><p>wnpa-sec-2016-26</p>
+	      <p>The GSM CBCH dissector could crash. (Bug 12278)</p></li>
+	    <li><p>wnpa-sec-2016-27</p>
+	      <p>MS-WSP dissector crash. (Bug 12341)</p></li>
+	  </ul>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</url>
+    </references>
+    <dates>
+      <discovery>2016-04-22</discovery>
+      <entry>2016-05-02</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="78abc022-0fee-11e6-9a1c-0014a5a57822">
     <topic>mercurial -- arbitrary code execution vulnerability</topic>
     <affects>
