Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 5.3
  CVE-2023-3648

  Mismatched Memory Management Routines in Wireshark

  Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jul 14, 2023
• Medium 5.3
  CVE-2023-3649

  Buffer Over-read in Wireshark

  iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Jul 14, 2023

Revision history

1. 2024-09-29 #5

   Neue Updates von Debian aufgenommen

2. 2024-09-09 #4

   Neue Updates von SUSE aufgenommen

3. 2023-08-08 #3

   Neue Updates von SUSE aufgenommen

4. 2023-07-13 #2

   CVEs hinzugefügt, Referenzen hinzugefügt

5. 2023-07-12 #1

   Initiale Fassung

References

• Wireshark Security Advisory vom 2023-07-12
  https://www.wireshark.org/security/wnpa-sec-2023-21.html
• Wireshark Security Advisory vom 2023-07-12
  https://www.wireshark.org/security/wnpa-sec-2023-22.html
• National Vulnerability Database vom 2023-07-13
  https://nvd.nist.gov/vuln/detail/CVE-2023-3649
• National Vulnerability Database vom 2023-07-13
  https://nvd.nist.gov/vuln/detail/CVE-2023-3648
• SUSE Security Update SUSE-SU-2023:3252-1 vom 2023-08-09
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015828.html
• SUSE Security Update SUSE-SU-2024:3165-1 vom 2024-09-09
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019395.html
• Debian Security Advisory DLA-3906 vom 2024-09-30
  https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html