Skip to content
OpenAdvisories
Low ALAS2-2023-2113 1 CVE

Low: wireshark security update (Amazon Linux 2)

Published Jul 5, 2023 · Updated Jul 19, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-0667: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 wireshark 1:2.6.2-15.amzn2.0.2
Amazon Linux · 2 wireshark-cli 1:2.6.2-15.amzn2.0.2
Amazon Linux · 2 wireshark-debuginfo 1:2.6.2-15.amzn2.0.2
Amazon Linux · 2 wireshark-devel 1:2.6.2-15.amzn2.0.2

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-0667

    Wireshark MSMMS parsing buffer overflow

    Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process run…

    Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0667.html