Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3649: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file CVE-2023-3648: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | wireshark-cli | 1:4.0.7-1.amzn2023.0.1 |
| Amazon Linux · 2023 | wireshark-cli-debuginfo | 1:4.0.7-1.amzn2023.0.1 |
| Amazon Linux · 2023 | wireshark-debugsource | 1:4.0.7-1.amzn2023.0.1 |
| Amazon Linux · 2023 | wireshark-devel | 1:4.0.7-1.amzn2023.0.1 |
Vulnerabilities 2
-
Medium 5.3
Mismatched Memory Management Routines in Wireshark
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
-
Medium 5.3
Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file