Stay Secure with the Latest Linux Advisories

security advisorymoderatedenial of service

Mageia 9: MGASA-2023-0275 Moderate: Wireshark Denial Of Service Issues

The updated wireshark packages fix security vulnerabilities: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service . MGASA-2023-0275 - Updated wireshark packages fix security vulnerabilities Publication date: 30 Sep 2023 URL: https://advisories.mageia.org/MGASA-2023-0275.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513 The updated wireshark packages fix security vulnerabilities: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. (CVE-2023-2906) BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file. (CVE-2023-4511) CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file. (CVE-2023-4512) BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file. (CVE-2023-4513) References: - https://bugs.mageia.org/show_bug.cgi?id=32275 - https://www.cve.org/CVERecord?id=CVE-2023-2906 - https://www.cve.org/CVERecord?id=CVE-2023-4511 - https://www.cve.org/CVERecord?id=CVE-2023-4512 - https://www.cve.org/CVERecord?id=CVE-2023-4513 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/ - https://www.cve.org/CVERecord?id=CVE-2023-2906 - https://www.cve.org/CVERecord?id=CVE-2023-4511 - https://www.cve.org/CVERecord?id=CVE-2023-4512 - https://www.cve.org/CVERecord?id=CVE-2023-4513 SRPMS: - 9/core/wireshark-4.0.8-1.mga9 . Renewed Wireshark distributions address vital vulnerabilities on Mageia. Key updates aim to improve resilience andsafeguard user data.. wireshark update,Mageia packages,security issues,Denial of Service,software fix. . LinuxSecurity.com Team

Sep 30, 2023 Mageia