操作系统--麒麟信安操作系统,国产操作系统,麒麟信安云桌面—

公告ID (KylinSec-SA-2023-1610)

摘要:

wireshark security update

安全等级: Medium

公告ID: KylinSec-SA-2023-1610

发布日期: 2023年8月12日

关联CVE: CVE-2023-3648

详细介绍

1. 漏洞描述

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file(CVE-2023-3648)

2. 影响范围

cve名称	产品	组件	是否受影响
CVE-2023-3648	KY3.4-4A	wireshark	Fixed
CVE-2023-3648	KY3.4-5A	wireshark	Fixed
CVE-2023-3648	KY3.5.1	wireshark	Fixed
CVE-2023-3648	KY3.5.2	wireshark	Fixed

3. 影响组件

wireshark

4. 修复版本

KY3.5.1

软件名称	架构	版本号
wireshark-help	x86_64	3.6.14-2.kb2.ky3_5
wireshark-devel	x86_64	3.6.14-2.kb2.ky3_5
wireshark	x86_64	3.6.14-2.kb2.ky3_5
wireshark-devel	aarch64	3.6.14-2.kb2.ky3_5
wireshark	aarch64	3.6.14-2.kb2.ky3_5
wireshark-help	aarch64	3.6.14-2.kb2.ky3_5

KY3.4-4A

软件名称	架构	版本号
wireshark-help	x86_64	3.6.14-2.kb1.ky3_4
wireshark-devel	x86_64	3.6.14-2.kb1.ky3_4
wireshark	x86_64	3.6.14-2.kb1.ky3_4
wireshark-help	aarch64	3.6.14-2.kb1.ky3_4
wireshark	aarch64	3.6.14-2.kb1.ky3_4
wireshark-devel	aarch64	3.6.14-2.kb1.ky3_4

KY3.4-5A

软件名称	架构	版本号
wireshark	x86_64	3.6.14-2.kb1.ky3_4
wireshark-devel	x86_64	3.6.14-2.kb1.ky3_4
wireshark-help	x86_64	3.6.14-2.kb1.ky3_4
wireshark	aarch64	3.6.14-2.kb1.ky3_4
wireshark-devel	aarch64	3.6.14-2.kb1.ky3_4
wireshark-help	aarch64	3.6.14-2.kb1.ky3_4

KY3.5.2

软件名称	架构	版本号
wireshark-help	x86_64	3.6.14-5.ky3_5
wireshark-devel	x86_64	3.6.14-5.ky3_5
wireshark	x86_64	3.6.14-5.ky3_5
wireshark-devel	aarch64	3.6.14-5.ky3_5
wireshark-help	aarch64	3.6.14-5.ky3_5
wireshark	aarch64	3.6.14-5.ky3_5