Summary
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668)
* wireshark: Candump log file parser crash (CVE-2023-2855)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | wireshark | 1:3.4.10-6.el9 |
| AlmaLinux · 9 | wireshark-cli | 1:3.4.10-6.el9 |
| AlmaLinux · 9 | wireshark-devel | 1:3.4.10-6.el9 |
Vulnerabilities 6
-
Medium 6.5
Wireshark RTPS Parsing Buffer Overflow
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
-
Medium 6.5
Wireshark IEEE-C37.118 parsing buffer overflow
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wires…
-
Medium 5.3
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture f…
-
Medium 5.3
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted c…
-
Medium 5.3
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted captur…
-
Medium 5.3
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injecti…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-0666
-
report
https://access.redhat.com/security/cve/CVE-2023-0668
-
report
https://access.redhat.com/security/cve/CVE-2023-2855
-
report
https://access.redhat.com/security/cve/CVE-2023-2856
-
report
https://access.redhat.com/security/cve/CVE-2023-2858
-
report
https://access.redhat.com/security/cve/CVE-2023-2952
-
report
https://bugzilla.redhat.com/2210822
-
report
https://bugzilla.redhat.com/2210824
-
report
https://bugzilla.redhat.com/2210829
-
report
https://bugzilla.redhat.com/2210832
-
report
https://bugzilla.redhat.com/2210835
-
report
https://bugzilla.redhat.com/2211406
-
advisory
https://errata.almalinux.org/9/ALSA-2023-6469.html