Wireshark Issues Security Update

Monday, April 17, 2017 @ 05:04 PM gHale

Open-source and cross-platform network protocol analyzer designed for network analysis, troubleshooting, development and education purposes, Wireshark, received an update Thursday to version 2.2.6.

Wireshark 2.2.6 is the sixth maintenance update to the stable series of the application.

Patched Apache Struts Under Attack
Cisco Suffers from Apache Struts2 Hole
Android Ransomware Delays, Confuses AV
More Ransomware Decryption Tools Available

Among the security vulnerabilities fixed in Wireshark 2.2.6 are crashes in the IMAP and PacketBB dissectors, as well as infinite loops with the WBMXL dissector, NetScaler file parser, RPCoRDMA dissector, BGP dissector, DOF dissector, SLSK dissector, SIGCOMP dissector, and WSP dissector.

Also updated in the maintenance release are the MySQL, IEEE 802.11, SSL, SSH, SCCP, ASTERIX, BGP, HTTP, BSSGP, WASSP, BT AVRCP, BT HCI_CMD, BT HFP, BT PBAP, DNS, PacketBB, DOF, EAPOL-MKA, SIGCOMP, GIOP, GSM SMS, TAPA, ICMP, WSP, IMAP, NBIFOM, ISIS LSP, SLSK, iSNS, and T.30 protocols.

Support for the LAPSat, ZigBee ZCL IAS, MIH, WBXML, NBAP, WLCCP, UA3G, PEEKREMOTE, IEEE 802.15.4, RPCoRDMA, and RTPproxy protocols also received an update, along with the NetScaler and pcapng capture file support.

In addition, 36 bugs ended up mitigated in the new release.

Leave a Reply

You must be logged in to post a comment.