Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6175: A heap based buffer overflow in Wireshark's NetScreen file parser may lead to a local arbitrary code execution via a crafted capture file.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wireshark | 1:2.6.2-15.amzn2.0.6 |
| Amazon Linux · 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.6 |
| Amazon Linux · 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.6 |
| Amazon Linux · 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.6 |
Vulnerabilities 1
-
High 7.8
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-6175.html