Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 6.3
  CVE-2022-3724

  Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or cr…

  Wireshark Foundation Wireshark wireshark Ubuntu
  Dec 9, 2022
• Medium 6.3
  CVE-2022-3725

  Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or craft…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Oct 27, 2022

Revision history

1. 2023-09-17 #7

   Neue Updates von Gentoo aufgenommen

2. 2023-01-24 #6

   Neue Updates von Amazon aufgenommen

3. 2022-12-13 #5

   Neue Updates von SUSE aufgenommen

4. 2022-12-11 #4

   CVE ergänzt

5. 2022-11-27 #3

   Referenz(en) aufgenommen: FEDORA-2022-CF9AE8E4FF

6. 2022-10-27 #2

   CVE ergänzt

7. 2022-10-26 #1

   Initiale Fassung

References

• Gentoo Linux Security Advisory GLSA-202309-02 vom 2023-09-17
  https://security.gentoo.org/glsa/202309-02
• Wireshark Release Notes vom 2022-10-26
  https://www.wireshark.org/lists/wireshark-announce/202210/msg00002.html
• Wireshark Security Advisory wnpa-sec-2022-07 vom 2022-10-26
  http://www.wireshark.org/security/wnpa-sec-2022-07.html
• Wireshark Security Advisory wnpa-sec-2022-08 vom 2022-10-26
  http://www.wireshark.org/security/wnpa-sec-2022-08.html
• SUSE Security Update SUSE-SU-2022:4453-1 vom 2022-12-13
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013223.html
• Amazon Linux Security Advisory ALAS-2023-268 vom 2023-01-25
  https://alas.aws.amazon.com/AL2022/ALAS-2023-268.html