Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 7

• Medium 6.3
  CVE-2023-0411

  Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0412

  TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection …

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0413

  Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0414

  Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture…

  Wireshark Foundation Wireshark wireshark Debian
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0415

  iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0416

  GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection o…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023
• Medium 6.3
  CVE-2023-0417

  Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packe…

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jan 24, 2023

Revision history

1. 2024-09-29 #7

   Neue Updates von Debian aufgenommen

2. 2024-09-09 #6

   Neue Updates von SUSE aufgenommen

3. 2023-05-16 #5

   Neue Updates von Amazon aufgenommen

4. 2023-02-12 #4

   Neue Updates von SUSE aufgenommen

5. 2023-02-08 #3

   Neue Updates von Debian aufgenommen

6. 2023-01-22 #2

   CVE's ergänzt

7. 2023-01-18 #1

   Initiale Fassung

References

• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/lists/wireshark-announce/202301/msg00000.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/lists/wireshark-announce/202301/msg00001.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-01.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-02.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-03.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-04.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-05.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-06.html
• Wireshark Vulnerability Summary vom 2023-01-18
  https://www.wireshark.org/security/wnpa-sec-2023-07.html
• Debian Security Advisory DLA-3313 vom 2023-02-09
  https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
• SUSE Security Update SUSE-SU-2023:0343-1 vom 2023-02-10
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013723.html
• Amazon Linux Security Advisory ALAS-2023-2040 vom 2023-05-17
  https://alas.aws.amazon.com/AL2/ALAS-2023-2040.html
• SUSE Security Update SUSE-SU-2024:3165-1 vom 2024-09-09
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019395.html
• Debian Security Advisory DLA-3906 vom 2024-09-30
  https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html