p PatchFirst

ALSA-2023:7015

ALSA-2023:7015 · Moderate: wireshark security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856) * wireshark: NetScaler file parser crash (CVE-2023-2858) * wireshark: XRA dissector infinite loop (CVE-2023-2952) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • wireshark AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6.2-17.el8

    Update to 1:2.6.2-17.el8

  • wireshark-cli AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6.2-17.el8

    Update to 1:2.6.2-17.el8

  • wireshark-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1:2.6.2-17.el8

    Update to 1:2.6.2-17.el8

Original sources

Check your server →