Red Hat Product Errata RHSA-2023:7015 - Security Advisory
Issued:
2023-11-14
Updated:
2023-11-14

RHSA-2023:7015 - Security Advisory

Synopsis

Moderate: wireshark security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for wireshark is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

  • wireshark: RTPS dissector crash (CVE-2023-0666)
  • wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
  • wireshark: NetScaler file parser crash (CVE-2023-2858)
  • wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Wireshark must be restarted for the update to take effect.

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

  • BZ - 2210824 - CVE-2023-2856 wireshark: VMS TCPIPtrace file parser crash
  • BZ - 2210829 - CVE-2023-2858 wireshark: NetScaler file parser crash
  • BZ - 2210832 - CVE-2023-0666 wireshark: RTPS dissector crash
  • BZ - 2211406 - CVE-2023-2952 wireshark: XRA dissector infinite loop

Red Hat Enterprise Linux for x86_64 8

SRPM
wireshark-2.6.2-17.el8.src.rpm SHA-256: 48ec669165909087a1d71072f13853c0e7fcfd4e5ef0aa7b4ee4d37f4b7b37b5
x86_64
wireshark-2.6.2-17.el8.x86_64.rpm SHA-256: 8c5c836dda1c8a57567b74e6ae980db320efab0d150836535e6e740715a4c09d
wireshark-cli-2.6.2-17.el8.i686.rpm SHA-256: 3fe337fd094333a88e9b0c64fc1273a64b932fca9edce2aa94a102982f8d6085
wireshark-cli-2.6.2-17.el8.x86_64.rpm SHA-256: f2648eadbbfa074077bdbe80bc68dd34ed9d6a10a5f8b2cfc498f7570789bd4d
wireshark-cli-debuginfo-2.6.2-17.el8.i686.rpm SHA-256: 12be6413d92bc18b014b66298dffb4baa069b44ad93e0dcc953e39b9bffed1fd
wireshark-cli-debuginfo-2.6.2-17.el8.x86_64.rpm SHA-256: 92c6d37b597bb780871f88e117291dfe0138b9d2709ecb3dbe4937892efd7ceb
wireshark-debuginfo-2.6.2-17.el8.i686.rpm SHA-256: 359c809a0afd974271132c0f5e28e825ef50bb3c52ae98e600a0d18defd3e5bc
wireshark-debuginfo-2.6.2-17.el8.x86_64.rpm SHA-256: 896f67834141b3e27a0d814e3a1e2e5eff8df3d0b7705ea5c583f8af112f8c04
wireshark-debugsource-2.6.2-17.el8.i686.rpm SHA-256: 468358e5357012cd4481f3cee57aa96a0e0ccb1760ce479b05e1b915618edb7b
wireshark-debugsource-2.6.2-17.el8.x86_64.rpm SHA-256: cd532f498e5d2cfcb398b8e25fed60fac2d9ca41e45764d8bf0172a82e7b7855

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
wireshark-2.6.2-17.el8.src.rpm SHA-256: 48ec669165909087a1d71072f13853c0e7fcfd4e5ef0aa7b4ee4d37f4b7b37b5
s390x
wireshark-2.6.2-17.el8.s390x.rpm SHA-256: 60a94402e0740958e28ad6a03abe70f1e3ccd5b5b1b98f4eedb5e8917703de85
wireshark-cli-2.6.2-17.el8.s390x.rpm SHA-256: a6e408e8d86eaa2c22532e048ada7136e90a6e1371249216c138ee4b4931e54a
wireshark-cli-debuginfo-2.6.2-17.el8.s390x.rpm SHA-256: dd0b0b1939190f3c5e8da0c89fb70c887c9a8ec821fd9df37dec8d57eee192e6
wireshark-debuginfo-2.6.2-17.el8.s390x.rpm SHA-256: 3af8927ffde775e727ca6942d13cd6af935e2de3523b020ee54b3f3ae1ff67a9
wireshark-debugsource-2.6.2-17.el8.s390x.rpm SHA-256: d28fe38349f67fabe26541da5ed1798423270cc14cf60e0dee391487ac5edcaa

Red Hat Enterprise Linux for Power, little endian 8

SRPM
wireshark-2.6.2-17.el8.src.rpm SHA-256: 48ec669165909087a1d71072f13853c0e7fcfd4e5ef0aa7b4ee4d37f4b7b37b5
ppc64le
wireshark-2.6.2-17.el8.ppc64le.rpm SHA-256: 59c7e3b74d6be00f6de2b314a89c03a96cd879ceb51ca93d2eaf3d989f810d05
wireshark-cli-2.6.2-17.el8.ppc64le.rpm SHA-256: 296d68d9044b19885c7091b472d714241d41ea6cb397ab75896dae5bce6fe5f9
wireshark-cli-debuginfo-2.6.2-17.el8.ppc64le.rpm SHA-256: 2c786fffc010100a8c0181815b49926edad37e06545f0b32f7851d46a3ab3ea9
wireshark-debuginfo-2.6.2-17.el8.ppc64le.rpm SHA-256: 0adf7acc689dbb7b8eee5d3c5c98f580156fa166f759c38082662dd04c36e887
wireshark-debugsource-2.6.2-17.el8.ppc64le.rpm SHA-256: 0d89bb0de2a1e05e2e20e5ed35327301562a345a2abfa76bbeda62f491906aee

Red Hat Enterprise Linux for ARM 64 8

SRPM
wireshark-2.6.2-17.el8.src.rpm SHA-256: 48ec669165909087a1d71072f13853c0e7fcfd4e5ef0aa7b4ee4d37f4b7b37b5
aarch64
wireshark-2.6.2-17.el8.aarch64.rpm SHA-256: b5cc455564b0a81f44999217c87638650a9b092c079f9d6c3117b3200f8dff21
wireshark-cli-2.6.2-17.el8.aarch64.rpm SHA-256: 11e01436c1a14a7fea74cf775a487355b873ed9743a45dd457047a7d08b1206f
wireshark-cli-debuginfo-2.6.2-17.el8.aarch64.rpm SHA-256: b2182dbf47cf6533023faea8745d887743eb2b389ca573a58c57774c6d2a0155
wireshark-debuginfo-2.6.2-17.el8.aarch64.rpm SHA-256: b7020ca96a9871112d839a3b2c2e8b9ff05f7fff7555427e14cc3225784d9193
wireshark-debugsource-2.6.2-17.el8.aarch64.rpm SHA-256: f2f45c71ddb61b02c2adcf11157eee724c29a18e6284c5d777d76c65e3a30312

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
wireshark-cli-debuginfo-2.6.2-17.el8.i686.rpm SHA-256: 12be6413d92bc18b014b66298dffb4baa069b44ad93e0dcc953e39b9bffed1fd
wireshark-cli-debuginfo-2.6.2-17.el8.x86_64.rpm SHA-256: 92c6d37b597bb780871f88e117291dfe0138b9d2709ecb3dbe4937892efd7ceb
wireshark-debuginfo-2.6.2-17.el8.i686.rpm SHA-256: 359c809a0afd974271132c0f5e28e825ef50bb3c52ae98e600a0d18defd3e5bc
wireshark-debuginfo-2.6.2-17.el8.x86_64.rpm SHA-256: 896f67834141b3e27a0d814e3a1e2e5eff8df3d0b7705ea5c583f8af112f8c04
wireshark-debugsource-2.6.2-17.el8.i686.rpm SHA-256: 468358e5357012cd4481f3cee57aa96a0e0ccb1760ce479b05e1b915618edb7b
wireshark-debugsource-2.6.2-17.el8.x86_64.rpm SHA-256: cd532f498e5d2cfcb398b8e25fed60fac2d9ca41e45764d8bf0172a82e7b7855
wireshark-devel-2.6.2-17.el8.i686.rpm SHA-256: b8ee3c62ba4c62d4ca2ec81a02e6b95ecf88db0afde6fd673b3a702240e78de8
wireshark-devel-2.6.2-17.el8.x86_64.rpm SHA-256: 93a46bee3d0dbb6404fd7d7edf42f26083ccef52a2eae7b2ccbbb8eee419a1b4

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
wireshark-cli-debuginfo-2.6.2-17.el8.ppc64le.rpm SHA-256: 2c786fffc010100a8c0181815b49926edad37e06545f0b32f7851d46a3ab3ea9
wireshark-debuginfo-2.6.2-17.el8.ppc64le.rpm SHA-256: 0adf7acc689dbb7b8eee5d3c5c98f580156fa166f759c38082662dd04c36e887
wireshark-debugsource-2.6.2-17.el8.ppc64le.rpm SHA-256: 0d89bb0de2a1e05e2e20e5ed35327301562a345a2abfa76bbeda62f491906aee
wireshark-devel-2.6.2-17.el8.ppc64le.rpm SHA-256: 34b823d3a4cbdd22971a81d849082979d9c09765b1327df0dcf6be4ccbd36fe8

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
wireshark-cli-debuginfo-2.6.2-17.el8.aarch64.rpm SHA-256: b2182dbf47cf6533023faea8745d887743eb2b389ca573a58c57774c6d2a0155
wireshark-debuginfo-2.6.2-17.el8.aarch64.rpm SHA-256: b7020ca96a9871112d839a3b2c2e8b9ff05f7fff7555427e14cc3225784d9193
wireshark-debugsource-2.6.2-17.el8.aarch64.rpm SHA-256: f2f45c71ddb61b02c2adcf11157eee724c29a18e6284c5d777d76c65e3a30312
wireshark-devel-2.6.2-17.el8.aarch64.rpm SHA-256: e26a2c98cd95b5c1b8ff4dc0eb2ca1fe1c92fd449a35e18b6f0aa972dd6afa83

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
wireshark-cli-debuginfo-2.6.2-17.el8.s390x.rpm SHA-256: dd0b0b1939190f3c5e8da0c89fb70c887c9a8ec821fd9df37dec8d57eee192e6
wireshark-debuginfo-2.6.2-17.el8.s390x.rpm SHA-256: 3af8927ffde775e727ca6942d13cd6af935e2de3523b020ee54b3f3ae1ff67a9
wireshark-debugsource-2.6.2-17.el8.s390x.rpm SHA-256: d28fe38349f67fabe26541da5ed1798423270cc14cf60e0dee391487ac5edcaa
wireshark-devel-2.6.2-17.el8.s390x.rpm SHA-256: d7442ce02b3ba48786187d730e3f442cce74ba9215f3fa3dad307bbe4b71a949

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.