Skip to content
OpenAdvisories
High ALAS2023-2023-197 10 CVEs

Important: wireshark security update (Amazon Linux 2023)

Published Jun 5, 2023 · Updated Feb 26, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2952: XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file CVE-2023-2879: GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file CVE-2023-2858: NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2857: A vulnerability was found in wireshark versions between 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13. The attacker would need the victim to open a maliciously crafted wireshark trace file, which would cause wireshark to crash. CVE-2023-2856: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2855: Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2854: A vulnerability exists in wireshark version 4.0.0 to 4.0.5 which would allow a remote attacker to crash wireshark by either injecting a malformed packet onto the wire or by convincing a user to read a malformed packet trace file. CVE-2023-0668: Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. CVE-2023-0667: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. CVE-2023-0666: Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version between 4.0.0 to 4.0.5, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. NOTE: https://www.wireshark.org/security/wnpa-sec-2023-18.html NOTE: https://gitlab.com/wireshark/wireshark/-/issues/19085

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 wireshark-cli 1:4.0.6-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-cli-debuginfo 1:4.0.6-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-debugsource 1:4.0.6-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-devel 1:4.0.6-1.amzn2023.0.1

Vulnerabilities 10

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0666.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0667.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-0668.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2854.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2855.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2856.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2857.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2858.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2879.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-2952.html