Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4513: BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file CVE-2023-4511: BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wireshark | 1:2.6.2-15.amzn2.0.4 |
| Amazon Linux · 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.4 |
| Amazon Linux · 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.4 |
| Amazon Linux · 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.4 |
Vulnerabilities 2
-
Medium 5.3
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
-
Medium 5.3
Missing Release of Memory after Effective Lifetime in Wireshark
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file