Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0208: GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wireshark | 1:2.6.2-15.amzn2.0.7 |
| Amazon Linux · 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.7 |
| Amazon Linux · 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.7 |
| Amazon Linux · 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.7 |
Vulnerabilities 1
-
High 7.8
Improper Handling of Missing Values in Wireshark
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-0208.html