TI-2023-02768 CVE-2023-2952 · GHSA-h2fj-p2f3-rmwc
Infinite loop in Wireshark
Priority MEDIUM 62
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
RHSA-2023:7015
wireshark security update
Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) wireshark-devel-1:2.6.2-17.el8
- Red Hat Enterprise Linux AppStream (v. 8) wireshark-1:2.6.2-17.el8, wireshark-cli-1:2.6.2-17.el8
Fixes 4 records
TI-2023-02676 CVE-2023-2856 · GHSA-c9g4-j4fr-ggh2
Out-of-bounds write in Wireshark
Priority MEDIUM 62
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
TI-2023-00631 CVE-2023-0666 · GHSA-p3q5-qxhp-fpcg
Wireshark RTPS Parsing Buffer Overflow
Priority MEDIUM 62
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the conte…
TI-2023-02678 CVE-2023-2858 · GHSA-wcmq-57jj-6qwc
Out-of-bounds write in Wireshark
Priority LOW 32
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file