SUSE-SU-2023:0343-1

Опубликовано: 10 фев. 2023

Источник: suse-cvrf

Описание

Security update for wireshark

This update for wireshark fixes the following issues:

Updated to version 3.6.11 (bsc#1207447):
- CVE-2023-0417: Fixed a memory leak in the NFS dissector (bsc#1207669).
- CVE-2023-0413: Fixed a crash in the dissection engine (bsc#1207665).
- CVE-2023-0416: Fixed a crash in the GNW dissector (bsc#1207668).
- CVE-2023-0415: Fixed a crash in the iSCSI dissector (bsc#1207667).
- CVE-2023-0411: Fixed several issues where an excessive CPU consumption could be triggered in multiple dissectors (bsc#1207663).
- CVE-2023-0412: Fixed a crash in the TIPC dissector (bsc#1207664).

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

SUSE Enterprise Storage 6

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Enterprise Storage 7

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Enterprise Storage 7.1

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Real Time 15 SP3

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

SUSE Manager Proxy 4.2

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

SUSE Manager Retail Branch Server 4.2

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

SUSE Manager Server 4.2

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

openSUSE Leap 15.4

libwireshark15-3.6.11-150000.3.83.1

libwiretap12-3.6.11-150000.3.83.1

libwsutil13-3.6.11-150000.3.83.1

wireshark-3.6.11-150000.3.83.1

wireshark-devel-3.6.11-150000.3.83.1

wireshark-ui-qt-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230343-1/
Link for SUSE-SU-2023:0343-1
https://lists.suse.com/pipermail/sle-security-updates/2023-February/013723.html
E-Mail link for SUSE-SU-2023:0343-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1206189
SUSE Bug 1206189
https://bugzilla.suse.com/1207447
SUSE Bug 1207447
https://bugzilla.suse.com/1207663
SUSE Bug 1207663
https://bugzilla.suse.com/1207664
SUSE Bug 1207664
https://bugzilla.suse.com/1207665
SUSE Bug 1207665
https://bugzilla.suse.com/1207667
SUSE Bug 1207667
https://bugzilla.suse.com/1207668
SUSE Bug 1207668
https://bugzilla.suse.com/1207669
SUSE Bug 1207669
https://www.suse.com/security/cve/CVE-2022-4345/
SUSE CVE CVE-2022-4345 page
https://www.suse.com/security/cve/CVE-2023-0411/
SUSE CVE CVE-2023-0411 page
https://www.suse.com/security/cve/CVE-2023-0412/
SUSE CVE CVE-2023-0412 page
https://www.suse.com/security/cve/CVE-2023-0413/
SUSE CVE CVE-2023-0413 page
https://www.suse.com/security/cve/CVE-2023-0415/
SUSE CVE CVE-2023-0415 page
https://www.suse.com/security/cve/CVE-2023-0416/
SUSE CVE CVE-2023-0416 page
https://www.suse.com/security/cve/CVE-2023-0417/
SUSE CVE CVE-2023-0417 page

Описание

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-4345.html
CVE-2022-4345
https://bugzilla.suse.com/1207080
SUSE Bug 1207080

Описание

Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0411.html
CVE-2023-0411
https://bugzilla.suse.com/1207663
SUSE Bug 1207663

Описание

TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0412.html
CVE-2023-0412
https://bugzilla.suse.com/1207664
SUSE Bug 1207664

Описание

Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0413.html
CVE-2023-0413
https://bugzilla.suse.com/1207665
SUSE Bug 1207665

Описание

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0415.html
CVE-2023-0415
https://bugzilla.suse.com/1207667
SUSE Bug 1207667

Описание

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0416.html
CVE-2023-0416
https://bugzilla.suse.com/1207668
SUSE Bug 1207668

Описание

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.11-150000.3.83.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.11-150000.3.83.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0417.html
CVE-2023-0417
https://bugzilla.suse.com/1207669
SUSE Bug 1207669

SUSE-SU-2023:0343-1

Описание

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Enterprise Storage 6

SUSE Enterprise Storage 7

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

SUSE Linux Enterprise Real Time 15 SP3

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Manager Proxy 4.2

SUSE Manager Retail Branch Server 4.2

SUSE Manager Server 4.2

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2022-4345

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0411

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0412

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0413

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0415

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0416

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-0417

Описание

Затронутые продукты

Ссылки