Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Gentoo: GLSA-202402-09 Low: Wireshark Out-Of-Bounds Threat

gentoo
Calendar Grey February 4, 2024
Scroller Gentoo
Enhance your Wireshark setup to rectify several minor security issues identified in the Gentoo GLSA 202402-09 advisory.
Multiple out-of-bounds read vulnerabilities have been discovered in Wireshark.

Summary

Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory gentoo low severity out-of-bounds wireshark

Resolution

All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-4.0.11"

References

[ 1 ] CVE-2023-5371 https://nvd.nist.gov/vuln/detail/CVE-2023-5371 [ 2 ] CVE-2023-6174 https://nvd.nist.gov/vuln/detail/CVE-2023-6174 [ 3 ] WNPA-SEC-2023-27 [ 4 ] WNPA-SEC-2023-28

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202402-09
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity
low
Lowest
Low
Medium
High
Critical

Severity: Low
Title: Wireshark: Multiple Vulnerabilities
Date: February 04, 2024
Bugs: #915224, #917421
ID: 202402-09

Topics%20covered

Topics Covered

security advisory gentoo low severity out-of-bounds wireshark

Synopsis

Multiple out-of-bounds read vulnerabilities have been discovered in Wireshark.

Background

Wireshark is a versatile network protocol analyzer.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Package Vulnerable Unaffected ---------------------- ------------ ------------ net-analyzer/wireshark < 4.0.11 >= 4.0.11

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.