Wireshark v1.6.14 Released

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.

Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998.

Changelog v1.6.14

What’s New

Bug Fixes

The following vulnerability has been fixed.

wnpa-sec-2012-32The sFlow dissector could go into an infinite loop. (Bug 7789)
Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.13.

CVE-2012-6054
wnpa-sec-2012-33The SCTP dissector could go into an infinite loop. (Bug 7802)
Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.13.

CVE-2012-6056
wnpa-sec-2013-13The MS-MMS dissector could crash. Discovered by Laurent Butti. (Bug 8382)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2478
wnpa-sec-2013-15The RTPS and RTPS2 dissectors could crash. Discovered by Alyssa Milburn. (Bug 8332)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2480
wnpa-sec-2013-16The Mount dissector could crash. Discovered by Alyssa Milburn. (Bug 8335)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2481
wnpa-sec-2013-17The AMPQ dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8337)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2482
wnpa-sec-2013-18The ACN dissector could attempt to divide by zero. Discovered by Alyssa Milburn. (Bug 8340)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2483
wnpa-sec-2013-19The CIMD dissector could crash. Discovered by Moshe Kaplan. (Bug 8346)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2484
wnpa-sec-2013-20The FCSP dissector could go into an infinite loop. Discovered by Moshe Kaplan. (Bug 8359)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2485
wnpa-sec-2013-22The DTLS dissector could crash. Discovered by Laurent Butti. (Bug 8380)
Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.

CVE-2013-2488

The following bugs have been fixed:

Lua pinfo.cols.protocol not holding value in postdissector. (Bug 6020)
Data combined via ssl_desegment_app_data not visible via “Follow SSL Stream” only decrypted ssl data tabs. (Bug 6434)
HTTP application/json-rpc should be decoded/shown as application/json. (Bug 7939)
WMM TSPEC Element Parsing is not done is wrong due to a wrong switch case number. (Bug 8320)
[BACnet] UCS-2 strings longer than 127 characters do not decode correctly. (Bug 8331)
Netflow dissector flowDurationMicroseconds nanosecond conversion wrong. (Bug 8410)
BE (3) AC is wrongly named as “Video” in (qos_acs). (Bug 8432)