Bug 13958

Summary:	[CVE 21] wireshark 4.0.5 CVEs found
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Yury <y.tumanov>
Component:	System (kernel, glibc, systemd, bash, PAM...)	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	critical
Priority:	Highest	CC:	a.proklov, e.kosachev, pastordidi, s.matveev, v.potapov, y.tumanov
Version:	All	Flags:	v.potapov: qa_verified+ y.tumanov: secteam_verified+ a.proklov: published+
Target Milestone:	2021.1 Fresh R12
Hardware:	All
OS:	Linux
URL:	CVE-2023-0666, CVE-2023-0667, CVE-2023-0668, CVE-2023-1161, CVE-2023-1992, CVE-2023-1993, CVE-2023-1994, CVE-2023-2854, CVE-2023-2855, CVE-2023-2856, CVE-2023-2857, CVE-2023-2858, CVE-2023-2879, CVE-2023-2906, CVE-2023-2952, CVE-2023-3648, CVE-2023-3649, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513, CVE-2023-5371,
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Yury 2023-10-18 20:32:11 MSK

Please patch CVEs for package wireshark version 4.0.5
  
INFO (CVEs are): wireshark 4.0.5
 cves found
CVE-2023-0666
Desc: Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0666
Severity: MEDIUM
CVE-2023-0667
Desc: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0667
Severity: MEDIUM
CVE-2023-0668
Desc: Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0668
Severity: MEDIUM
CVE-2023-1161
Desc: ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1161
Severity: HIGH
CVE-2023-1992
Desc: RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1992
Severity: HIGH
CVE-2023-1993
Desc: LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1993
Severity: MEDIUM
CVE-2023-1994
Desc: GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1994
Severity: MEDIUM
CVE-2023-2854
Desc: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2854
Severity: MEDIUM
CVE-2023-2855
Desc: Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2855
Severity: MEDIUM
CVE-2023-2856
Desc: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2856
Severity: MEDIUM
CVE-2023-2857
Desc: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2857
Severity: MEDIUM
CVE-2023-2858
Desc: NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2858
Severity: MEDIUM
CVE-2023-2879
Desc: GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2879
Severity: HIGH
CVE-2023-2906
Desc: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2906
Severity: MEDIUM
CVE-2023-2952
Desc: XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2952
Severity: MEDIUM
CVE-2023-3648
Desc: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-3648
Severity: MEDIUM
CVE-2023-3649
Desc: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-3649
Severity: MEDIUM
CVE-2023-4511
Desc: BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-4511
Severity: HIGH
CVE-2023-4512
Desc: CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-4512
Severity: HIGH
CVE-2023-4513
Desc: BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-4513
Severity: HIGH
CVE-2023-5371
Desc: RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-5371
Severity: MEDIUM

Comment 1 Svyatoslav Matveev 2023-10-19 19:16:12 MSK

********** QA ADVISORY **********

Закрыто обновлением.

*** wireshark
**  4.0.5 .. 4.0.10

https://abf.io/build_lists/4758908
https://abf.io/build_lists/4758907
https://abf.io/build_lists/4758909
https://abf.io/build_lists/4758910
https://abf.io/build_lists/4758911

Comment 2 Yury 2023-10-19 23:08:18 MSK

secteam_verified

Comment 3 Dmitry Postnikov 2023-10-24 10:55:25 MSK

*****************************
Обновление отослано в Тестинг

Comment 4 Vladimir Potapov 2023-11-01 11:13:20 MSK

wireshark-4.0.10-1
https://abf.io/build_lists/4758908
https://abf.io/build_lists/4758907
https://abf.io/build_lists/4758909
https://abf.io/build_lists/4758910
https://abf.io/build_lists/4758911
************************* Advisory *************************
All CVEs fixed
************************************************************
QA Verified