Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Wireshark on AlmaLinux may crash or freeze
published 2 years ago
Summary
The Wireshark, Wireshark‑CLI, and Wireshark‑devel packages for AlmaLinux contain code that can cause the program to stop working or become unresponsive when processing certain network files. This could interrupt network monitoring tasks or require a restart. Install the latest AlmaLinux update for these packages as soon as possible to apply the fixes.
What to do
- Update almalinux wireshark to version 1:2.6.2-17.el8.
- Update almalinux wireshark-cli to version 1:2.6.2-17.el8.
- Update almalinux wireshark-devel to version 1:2.6.2-17.el8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | wireshark |
< 1:2.6.2-17.el8 Fix: upgrade to 1:2.6.2-17.el8
|
| AlmaLinux:8 | almalinux | wireshark-cli |
< 1:2.6.2-17.el8 Fix: upgrade to 1:2.6.2-17.el8
|
| AlmaLinux:8 | almalinux | wireshark-devel |
< 1:2.6.2-17.el8 Fix: upgrade to 1:2.6.2-17.el8
|
Original advisory text
Moderate: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Security Fix(es):
* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
- https://access.redhat.com/errata/RHSA-2023:7015 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-0666 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-2856 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-2858 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-2952 Third Party Advisory
- https://bugzilla.redhat.com/2210824 Third Party Advisory
- https://bugzilla.redhat.com/2210829 Third Party Advisory
- https://bugzilla.redhat.com/2210832 Third Party Advisory
- https://bugzilla.redhat.com/2211406 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2023-7015.html Vendor Advisory
Timeline
Published14 Nov 2023
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2023:7015 · OSV
Track software like this
Free during beta