Skip to content
OpenAdvisories
Medium ALAS2-2023-2187 2 CVEs

Moderate: wireshark security update (Amazon Linux 2)

Published Aug 3, 2023 · Updated Aug 8, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2952: XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file CVE-2023-2856: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 wireshark 1:2.6.2-15.amzn2.0.3
Amazon Linux · 2 wireshark-cli 1:2.6.2-15.amzn2.0.3
Amazon Linux · 2 wireshark-debuginfo 1:2.6.2-15.amzn2.0.3
Amazon Linux · 2 wireshark-devel 1:2.6.2-15.amzn2.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2856.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2952.html