Most recent entries from all

ALSA-2023:6469 — Moderate: wireshark security update

Affected: AlmaLinux:9: wireshark, AlmaLinux:9: wireshark-cli, AlmaLinux:9: wireshark-devel

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668) * wireshark: Candump log file parser crash (CVE-2023-2855) * wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856) * wireshark: NetScaler file parser crash (CVE-2023-2858) * wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

cnvd-2023-62287

EUVD-2026-258372

fkie_cve-2023-0666

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

GHSA-p3q5-qxhp-fpcg

gsd-2023-0666

OESA-2024-1342 — wireshark security update

Affected: openEuler:22.03-LTS-SP3: wireshark

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fix(es): Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.(CVE-2023-0666)

openSUSE-SU-2024:12958-1 — libwireshark16-4.0.6-1.1 on GA media

libwireshark16-4.0.6-1.1 on GA media

RLSA-2023:7015 — Moderate: wireshark security update

Affected: Rocky Linux:8: wireshark

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)

* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)

* wireshark: NetScaler file parser crash (CVE-2023-2858)

* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.

SUSE-SU-2024:3165-1 — Security update for wireshark

Security update for wireshark

UBUNTU-CVE-2023-0666

Affected: Ubuntu:Pro:14.04:LTS: wireshark, Ubuntu:Pro:16.04:LTS: wireshark, Ubuntu:Pro:18.04:LTS: wireshark, Ubuntu:Pro:20.04:LTS: wireshark, Ubuntu:Pro:22.04:LTS: wireshark

WID-SEC-W-2023-1300 — Wireshark: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code auszuführen.