Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Medium 5.3
  CVE-2023-4511

  Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

  BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Aug 24, 2023
• Medium 5.3
  CVE-2023-4512

  Uncontrolled Recursion in Wireshark

  CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark Debian
  Aug 24, 2023
• Medium 5.3
  CVE-2023-4513

  Missing Release of Memory after Effective Lifetime in Wireshark

  BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Aug 24, 2023

Revision history

1. 2024-09-29 #7

   Neue Updates von Debian aufgenommen

2. 2024-02-29 #6

   Neue Updates von Debian aufgenommen

3. 2023-10-05 #5

   Neue Updates von Amazon aufgenommen

4. 2023-09-26 #4

   Neue Updates von SUSE aufgenommen

5. 2023-08-31 #3

   Neue Updates von Fedora aufgenommen

6. 2023-08-29 #2

   CVE ergänzt

7. 2023-08-23 #1

   Initiale Fassung

References

• Wireshark-announce Mailing List vom 2023-08-23
  https://www.wireshark.org/lists/wireshark-announce/202308/msg00000.html
• Wireshark-announce Mailing List vom 2023-08-23
  https://www.wireshark.org/lists/wireshark-announce/202308/msg00001.html
• Wireshark wnpa-sec-2023-23 vom 2023-08-23
  https://www.wireshark.org/security/wnpa-sec-2023-23.html
• Wireshark wnpa-sec-2023-24 vom 2023-08-23
  https://www.wireshark.org/security/wnpa-sec-2023-24.html
• Wireshark wnpa-sec-2023-25 vom 2023-08-23
  https://www.wireshark.org/security/wnpa-sec-2023-25.html
• Wireshark wnpa-sec-2023-26 vom 2023-08-23
  https://www.wireshark.org/security/wnpa-sec-2023-26.html
• Debian Security Advisory DLA-3746 vom 2024-03-01
  https://lists.debian.org/debian-lts-announce/2024/02/msg00016.html
• Fedora Security Advisory FEDORA-2023-B57A9BE8A8 vom 2023-08-31
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-b57a9be8a8
• Fedora Security Advisory FEDORA-2023-ABC9CA1E7E vom 2023-08-31
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-abc9ca1e7e
• Fedora Security Advisory FEDORA-2023-920A3AB4EE vom 2023-08-31
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-920a3ab4ee
• SUSE Security Update SUSE-SU-2023:3778-1 vom 2023-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016328.html
• Amazon Linux Security Advisory ALAS2-2023-2267 vom 2023-10-06
  https://alas.aws.amazon.com/AL2/ALAS-2023-2267.html
• Debian Security Advisory DLA-3906 vom 2024-09-30
  https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html