Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5601: Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | wireshark-cli | 1:4.4.2-1.amzn2023.0.3 |
| Amazon Linux · 2023 | wireshark-cli-debuginfo | 1:4.4.2-1.amzn2023.0.3 |
| Amazon Linux · 2023 | wireshark-debugsource | 1:4.4.2-1.amzn2023.0.3 |
| Amazon Linux · 2023 | wireshark-devel | 1:4.4.2-1.amzn2023.0.3 |
Vulnerabilities 1
-
High 7.8
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-5601.html