ALT-PU-2022-1391

Критический

ALT-PU-2022-1391: package wireshark update to version 3.6.2-alt1

Источник

errata.altlinux.org

Дата публикации

28.02.2022

Дата обновления

28.02.2022

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades wireshark to version 3.6.2-alt1.

Устраненные уязвимости5

CVE-2022-0581

Высокий 7.5

Дата публикации: 14.02.2022

CWE-416

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2022-0581 https://nvd.nist.gov/vuln/detail/CVE-2022-0581

Ссылки1

ALT-PU-2022-1391 https://errata.altlinux.org/ALT-PU-2022-1391

Связанные уязвимости

openSUSE-SU-2022:0722-1

suse-cvrf

больше 4 лет назад

Security update for wireshark

SUSE-SU-2022:0722-1

suse-cvrf

больше 4 лет назад

Security update for wireshark

ALT-PU-2022-1349

CVSS3: 9.8

altlinux

больше 4 лет назад

ALT-PU-2022-1349: package `wireshark` update to version 3.6.2-alt1

CVE-2022-0581

CVSS3: 7.5

ubuntu

больше 4 лет назад

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

CVE-2022-0581

CVSS3: 7.5

redhat

почти 5 лет назад

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file