Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-2955: T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | wireshark-cli | 1:4.0.8-2.amzn2023.0.6 |
| Amazon Linux · 2023 | wireshark-cli-debuginfo | 1:4.0.8-2.amzn2023.0.6 |
| Amazon Linux · 2023 | wireshark-debugsource | 1:4.0.8-2.amzn2023.0.6 |
| Amazon Linux · 2023 | wireshark-devel | 1:4.0.8-2.amzn2023.0.6 |
Vulnerabilities 1
-
High 7.8
Mismatched Memory Management Routines in Wireshark
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-2955.html