rpm package
suse/wireshark&distro=SUSE Linux Enterprise Real Time 15 SP3
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3
Vulnerabilities (21)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-3648 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | Jul 14, 2023 | Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0667 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | Jun 7, 2023 | Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark | ||
| CVE-2023-0668 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | Jun 7, 2023 | Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. | ||
| CVE-2023-2952 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | May 30, 2023 | XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-2879 | — | < 3.6.15-150000.3.97.1 | 3.6.15-150000.3.97.1 | May 26, 2023 | GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-2858 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2857 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2856 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2855 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 26, 2023 | Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||
| CVE-2023-2859 | — | < 3.6.14-150000.3.92.1 | 3.6.14-150000.3.92.1 | May 24, 2023 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | ||
| CVE-2023-1994 | — | < 3.6.13-150000.3.89.1 | 3.6.13-150000.3.89.1 | Apr 12, 2023 | GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-1993 | — | < 3.6.13-150000.3.89.1 | 3.6.13-150000.3.89.1 | Apr 12, 2023 | LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-1992 | — | < 3.6.13-150000.3.89.1 | 3.6.13-150000.3.89.1 | Apr 12, 2023 | RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-1161 | — | < 3.6.12-150000.3.86.1 | 3.6.12-150000.3.86.1 | Mar 6, 2023 | ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0417 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0416 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0415 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0413 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0412 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file | ||
| CVE-2023-0411 | — | < 3.6.11-150000.3.83.1 | 3.6.11-150000.3.83.1 | Jan 24, 2023 | Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file |
- CVE-2023-3648Jul 14, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
- CVE-2023-0667Jun 7, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
- CVE-2023-0668Jun 7, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
- CVE-2023-2952May 30, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- CVE-2023-2879May 26, 2023affected < 3.6.15-150000.3.97.1fixed 3.6.15-150000.3.97.1
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
- CVE-2023-2858May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2857May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2856May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2855May 26, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
- CVE-2023-2859May 24, 2023affected < 3.6.14-150000.3.92.1fixed 3.6.14-150000.3.92.1
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- CVE-2023-1994Apr 12, 2023affected < 3.6.13-150000.3.89.1fixed 3.6.13-150000.3.89.1
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
- CVE-2023-1993Apr 12, 2023affected < 3.6.13-150000.3.89.1fixed 3.6.13-150000.3.89.1
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
- CVE-2023-1992Apr 12, 2023affected < 3.6.13-150000.3.89.1fixed 3.6.13-150000.3.89.1
RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
- CVE-2023-1161Mar 6, 2023affected < 3.6.12-150000.3.86.1fixed 3.6.12-150000.3.86.1
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- CVE-2023-0417Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
- CVE-2023-0416Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
- CVE-2023-0415Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
- CVE-2023-0413Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
- CVE-2023-0412Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
- CVE-2023-0411Jan 24, 2023affected < 3.6.11-150000.3.83.1fixed 3.6.11-150000.3.83.1
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Page 1 of 2