Software Update: Wireshark 1.8.6

Version 1.8.6 of the open source protocol analyzer and packet niffer Wireshark has been released. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows XP and above, Linux, and OS X, with separate downloads for 32bit and 64bit versions of the operating systems. The changelog for this release shows the following changes and improvements:

The following vulnerabilities have been fixed.

• wnpa-sec-2013-10 The TCP dissector could crash. (Bug 8274) CVE-2013-2475
• wnpa-sec-2013-11 The HART/IP dissector could go into an infinite loop. (Bug 8360) CVE-2013-2476
• wnpa-sec-2013-12 The CSN.1 dissector could crash. (Bug 8383) CVE-2013-2477
• wnpa-sec-2013-13 The MS-MMS dissector could crash. (Bug 8382) CVE-2013-2478
• wnpa-sec-2013-14 The MPLS Echo dissector could go into an infinite loop. (Bug 8039) CVE-2013-2479
• wnpa-sec-2013-15 The RTPS and RTPS2 dissectors could crash. (Bug 8332) CVE-2013-2480
• wnpa-sec-2013-16 The Mount dissector could crash. (Bug 8335) CVE-2013-2481
• wnpa-sec-2013-17 The AMPQ dissector could go into an infinite loop. (Bug 8337) CVE-2013-2482
• wnpa-sec-2013-18 The ACN dissector could attempt to divide by zero. (Bug 8340) CVE-2013-2483
• wnpa-sec-2013-19 The CIMD dissector could crash. (Bug 8346) CVE-2013-2484
• wnpa-sec-2013-20 The FCSP dissector could go into an infinite loop. (Bug 8359) CVE-2013-2485
• wnpa-sec-2013-21 The RELOAD dissector could go into an infinite loop. (Bug 8364) CVE-2013-2486 CVE-2013-2487
• wnpa-sec-2013-22 The DTLS dissector could crash. (Bug 8380) CVE-2013-2488

The following bugs have been fixed:

• Lua pinfo.cols.protocol not holding value in postdissector. (Bug 6020)
• data combined via ssl_desegment_app_data not visible via “Follow SSL Stream” only decrypted ssl data tabs. (Bug 6434)
• HTTP application/json-rpc should be decoded/shown as application/json. (Bug 7939)
• Maximum value of 802.11-2012 Duration field should be 32767. (Bug 8056)
• Voice RTP player crash if player is closed while playing. (Bug 8065)
• Display Filter Macros crash. (Bug 8073)
• RRC RadioBearerSetup message decoding issue. (Bug 8290)
• R click filters add ! in front of field when choosing “apply as filter>selected”. (Bug 8297)
• BACnet – Loop Object – Setpoint-Reference property does not decode correctly. (Bug 8306)
• WMM TSPEC Element Parsing is not done is wrong due to a wrong switch case number. (Bug 8320)
• Incorrect RTP statistics (Lost Packets indication not ok). (Bug 8321)
• Registering ieee802154 dissector for IEEE802.15.4 frames inside Linux SLL frames. (Bug 8325)
• Version Field is skipped while parsing WMM_TSPEC causing wrong dissecting (1 byte offset missing) of all fields in the TSPEC. (Bug 8330)
• [BACnet] UCS-2 strings longer than 127 characters do not decode correctly. (Bug 8331)
• Malformed IEEE80211 frame triggers DISSECTOR_ASSERT. (Bug 8345)
• Decoding or GSM MAP SMS Diagnostics. (Bug 8378)
• Incorrect packet length displayed for Flight Message Transfer Protocol (FMTP). (Bug 8407)
• Netflow dissector flowDurationMicroseconds nanosecond conversion wrong. (Bug 8410)
• BE(3) AC is wrongly named as “Video” in (qos_acs). (Bug 8432)

Updated Protocol Support

• ACN
• AMQP
• ASN.1 PER
• BACnet
• CIMD
• CSN.1
• DOCSIS TLVs
• DTLS
• FCSP
• FMP/NOTIFY
• FMTP
• GSM MAP SMS
• HEART/IP
• IEEE 802.11
• IEEE 802.15.4
• JSON
• Linux SLL
• LTE RRC
• mount
• MPLS Echo
• net flow
• RELOAD
• RSL
• RTP
• RTPS
• RTPS2
• SABP
• SIP
• SSL
• TCP

The following downloads are available:
Wireshark 1.8.6 for Windows (32bit)
Wireshark 1.8.6 for Windows (64bit)
Wireshark 1.8.6 for Windows (U3 version)
Wireshark 1.8.6 for PortableApps
Wireshark 1.8.6 for Mac OS X 10.5 (Intel, 32bit)
Wireshark 1.8.6 for Mac OS X 10.5 (PPC, 32bit)
Wireshark 1.8.6 for Mac OS X 10.6 (Intel, 64bit)
Wireshark 1.8.6 source code for Linux, Solaris, FreeBSD and NetBSD among others