Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0209: IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wireshark | 1:2.6.2-15.amzn2.0.8 |
| Amazon Linux · 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.8 |
| Amazon Linux · 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.8 |
| Amazon Linux · 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.8 |
Vulnerabilities 1
-
High 7.8
NULL Pointer Dereference in Wireshark
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-0209.html