Skip to content
OpenAdvisories
High ALAS2-2023-2040 2 CVEs

Important: wireshark security update (Amazon Linux 2)

Published May 11, 2023 · Updated May 16, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-0417: Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file CVE-2023-0412: TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 wireshark 1:2.6.2-15.amzn2.0.1
Amazon Linux · 2 wireshark-cli 1:2.6.2-15.amzn2.0.1
Amazon Linux · 2 wireshark-debuginfo 1:2.6.2-15.amzn2.0.1
Amazon Linux · 2 wireshark-devel 1:2.6.2-15.amzn2.0.1

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0412.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0417.html