Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5371: RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | wireshark-cli | 1:4.0.8-2.amzn2023.0.2 |
| Amazon Linux · 2023 | wireshark-cli-debuginfo | 1:4.0.8-2.amzn2023.0.2 |
| Amazon Linux · 2023 | wireshark-debugsource | 1:4.0.8-2.amzn2023.0.2 |
| Amazon Linux · 2023 | wireshark-devel | 1:4.0.8-2.amzn2023.0.2 |
Vulnerabilities 1
-
Medium 5.3
Memory Allocation with Excessive Size Value in Wireshark
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-5371.html