SUSE-SU-2023:2320-1

Опубликовано: 30 мая 2023

Источник: suse-cvrf

Описание

Security update for wireshark

This update for wireshark fixes the following issues:

Updated to version 3.6.14:

CVE-2023-2855: Fixed a crash in the Candump log file parser (boo#1211703).
CVE-2023-2856: Fixed a crash in the VMS TCPIPtrace file parser (boo#1211707).
CVE-2023-2857: Fixed a crash in the BLF file parser (boo#1211705).
CVE-2023-2858: Fixed a crash in the NetScaler file parser (boo#1211706).
CVE-2023-0668: Fixed a crash in the IEEE C37.118 Synchrophasor dissector (boo#1211710).
CVE-2023-2879: GDSDB dissector infinite loop (boo#1211793).

Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

wireshark-devel-3.6.14-150000.3.92.1

wireshark-ui-qt-3.6.14-150000.3.92.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

wireshark-devel-3.6.14-150000.3.92.1

wireshark-ui-qt-3.6.14-150000.3.92.1

SUSE Linux Enterprise Real Time 15 SP3

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

wireshark-devel-3.6.14-150000.3.92.1

wireshark-ui-qt-3.6.14-150000.3.92.1

openSUSE Leap 15.4

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

wireshark-devel-3.6.14-150000.3.92.1

wireshark-ui-qt-3.6.14-150000.3.92.1

openSUSE Leap 15.5

libwireshark15-3.6.14-150000.3.92.1

libwiretap12-3.6.14-150000.3.92.1

libwsutil13-3.6.14-150000.3.92.1

wireshark-3.6.14-150000.3.92.1

wireshark-devel-3.6.14-150000.3.92.1

wireshark-ui-qt-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232320-1/
Link for SUSE-SU-2023:2320-1
https://lists.suse.com/pipermail/sle-updates/2023-May/029579.html
E-Mail link for SUSE-SU-2023:2320-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1211703
SUSE Bug 1211703
https://bugzilla.suse.com/1211705
SUSE Bug 1211705
https://bugzilla.suse.com/1211706
SUSE Bug 1211706
https://bugzilla.suse.com/1211707
SUSE Bug 1211707
https://bugzilla.suse.com/1211710
SUSE Bug 1211710
https://bugzilla.suse.com/1211793
SUSE Bug 1211793
https://www.suse.com/security/cve/CVE-2023-0668/
SUSE CVE CVE-2023-0668 page
https://www.suse.com/security/cve/CVE-2023-2855/
SUSE CVE CVE-2023-2855 page
https://www.suse.com/security/cve/CVE-2023-2856/
SUSE CVE CVE-2023-2856 page
https://www.suse.com/security/cve/CVE-2023-2857/
SUSE CVE CVE-2023-2857 page
https://www.suse.com/security/cve/CVE-2023-2858/
SUSE CVE CVE-2023-2858 page
https://www.suse.com/security/cve/CVE-2023-2859/
SUSE CVE CVE-2023-2859 page

Описание

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0668.html
CVE-2023-0668
https://bugzilla.suse.com/1211710
SUSE Bug 1211710

Описание

Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2855.html
CVE-2023-2855
https://bugzilla.suse.com/1211703
SUSE Bug 1211703

Описание

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2856.html
CVE-2023-2856
https://bugzilla.suse.com/1211707
SUSE Bug 1211707

Описание

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2857.html
CVE-2023-2857
https://bugzilla.suse.com/1211705
SUSE Bug 1211705

Описание

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2858.html
CVE-2023-2858
https://bugzilla.suse.com/1211706
SUSE Bug 1211706

Описание

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.14-150000.3.92.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:wireshark-3.6.14-150000.3.92.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-2859.html
CVE-2023-2859

SUSE-SU-2023:2320-1

Описание

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

SUSE Linux Enterprise Real Time 15 SP3

openSUSE Leap 15.4

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-0668

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-2855

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-2856

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-2857

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-2858

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-2859

Описание

Затронутые продукты

Ссылки