Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 802216 (CVE-2021-22235, WNPA-SEC-2021-06) - <net-analyzer/wireshark-3.4.7: DNP dissector crash (CVE-2021-22235)
Summary: <net-analyzer/wireshark-3.4.7: DNP dissector crash (CVE-2021-22235)
Status: IN_PROGRESS
Alias: CVE-2021-22235, WNPA-SEC-2021-06
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B3 [glsa?]
Keywords:
Depends on:
Blocks:
 
Reported: 2021-07-15 03:34 UTC by Sam James
Modified: 2021-08-14 03:54 UTC (History)
3 users (show)

See Also:
Package list:
net-analyzer/wireshark-3.4.7-r1
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester gentoo-dev Security 2021-07-15 03:34:15 UTC 
Description:
"• wnpa-sec-2021-06[1] DNP dissector crash. Issue 17462[2].
      CVE-2021-22235[3]."
Comment 1 Larry the Git Cow gentoo-dev 2021-07-15 03:44:32 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=af43333f245fdcd664de8c138550d217e8fbc0fb

commit af43333f245fdcd664de8c138550d217e8fbc0fb
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-07-15 03:44:10 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-07-15 03:44:23 +0000

    net-analyzer/wireshark: add 3.4.7
    
    Bug: https://bugs.gentoo.org/802216
    Signed-off-by: Sam James <sam@gentoo.org>

 net-analyzer/wireshark/Manifest               |   1 +
 net-analyzer/wireshark/wireshark-3.4.7.ebuild | 278 ++++++++++++++++++++++++++
 2 files changed, 279 insertions(+)
Comment 2 Sam James archtester gentoo-dev Security 2021-07-22 06:06:55 UTC 
arm64 done
Comment 3 Agostino Sarubbo gentoo-dev 2021-07-22 07:09:15 UTC 
amd64 stable
Comment 4 Sam James archtester gentoo-dev Security 2021-07-23 17:56:42 UTC 
x86 done
Comment 5 Sam James archtester gentoo-dev Security 2021-07-26 04:36:48 UTC 
ppc64 done
Comment 6 Sam James archtester gentoo-dev Security 2021-07-30 22:35:52 UTC 
arm done

all arches done
Comment 7 Larry the Git Cow gentoo-dev 2021-08-06 03:43:50 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f6345dd7eedd32252fa376637883300a2658c210

commit f6345dd7eedd32252fa376637883300a2658c210
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-08-06 02:58:13 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-08-06 03:41:19 +0000

    net-analyzer/wireshark: drop 3.4.6
    
    Bug: https://bugs.gentoo.org/802216
    Signed-off-by: Sam James <sam@gentoo.org>

 net-analyzer/wireshark/Manifest               |   1 -
 net-analyzer/wireshark/wireshark-3.4.6.ebuild | 278 --------------------------
 2 files changed, 279 deletions(-)
Comment 8 NATTkA bot gentoo-dev 2021-08-14 03:52:31 UTC 
Unable to check for sanity:

> no match for package: net-analyzer/wireshark-3.4.7