Skip to content
OpenAdvisories
Medium ALAS2023-2023-038 22 CVEs

Moderate: wireshark security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3725: Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file CVE-2022-3190: Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file. CVE-2022-0586: Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file CVE-2022-0585: Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file CVE-2022-0583: Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file CVE-2022-0582: Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file CVE-2022-0581: Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file CVE-2021-4190: An infinite-loop flaw was found in Wireshark. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop. CVE-2021-4186: A segmentation issue was found in Wireshark. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt or crash. CVE-2021-4185: An infinite-loop flaw was found in Wireshark RTMPT. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop. CVE-2021-4184: An infinite-loop flaw was found in Wireshark's DHT dissector module. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash or go into an infinite loop. CVE-2021-4182: A parser infinite-loop flaw was found in wireshark. An attacker with local network access could pass specially crafted capture files causing an application to halt, crash, or infinite loop. CVE-2021-4181: A denial of service via packet injection flaw was found in wireshark. An attacker with local network access could pass specially crafted capture files causing an application to halt or crash, leading to a denial of service. CVE-2021-39929: A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth DHT input can cause a denial of service. CVE-2021-39928: A flaw was found in Wireshark. A process failure on crafted or malformed IEEE 802.11 input can cause a denial of service via packet injection or a crafted capture file. CVE-2021-39926: A flaw was found in Wireshark. A process failure on crafted or malformed HCI_ISO input can cause a denial of service via packet injection or a crafted capture file. CVE-2021-39925: A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth SDP input can cause a denial of service via packet injection or a crafted capture file. CVE-2021-39924: A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth DHT input can cause a denial of service via packet injection or a crafted capture file. CVE-2021-39923: A flaw was found in Wireshark. A process failure consumes excessive CPU resources on crafted or malformed PNRP input and can cause a denial of service. CVE-2021-39922: A flaw was found in Wireshark. A process failure on crafted or malformed ANSI C12.22 input can cause a denial of service via packet injection or a crafted capture file. CVE-2021-39921: A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the Modbus dissector can cause a denial of service via a packet injection or crafted capture file. CVE-2021-39920: A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted capture file.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 wireshark-cli 1:4.0.2-1.amzn2023.0.2
Amazon Linux · 2023 wireshark-cli-debuginfo 1:4.0.2-1.amzn2023.0.2
Amazon Linux · 2023 wireshark-debugsource 1:4.0.2-1.amzn2023.0.2
Amazon Linux · 2023 wireshark-devel 1:4.0.2-1.amzn2023.0.2

Vulnerabilities 22

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39920.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39921.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39922.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39923.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39924.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39925.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39926.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39928.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-39929.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4181.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4182.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4184.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4185.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4186.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4190.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0581.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0582.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0583.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0585.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0586.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3190.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3725.html