File _patchinfo of Package patchinfo.33874

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.33874

<patchinfo incident="33874">
  <issue tracker="cve" id="2024-4855"/>
  <issue tracker="cve" id="2024-4854"/>
  <issue tracker="cve" id="2024-4853"/>
  <issue tracker="bnc" id="1224276">VUL-0: CVE-2024-4855: wireshark: use-after-free issue in editcap could cause denial of service via crafted capture file</issue>
  <issue tracker="bnc" id="1224274">VUL-0: CVE-2024-4854: wireshark: MONGO and ZigBee TLV dissector infinite loops via packet injection or crafted capture file</issue>
  <issue tracker="bnc" id="1224259">VUL-0: CVE-2024-4853: wireshark: memory handling issue in editcap could cause denial of service via crafted capture file</issue>
  <packager>rfrohl</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for wireshark</summary>
  <description>This update for wireshark fixes the following issues:

Update to version 3.6.22:

- CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274)
- CVE-2024-4853: The editcap command line utility could crash
  when chopping bytes from the beginning of a packet (bsc#1224259)
- CVE-2024-4855: The editcap command line utility could crash
  when injecting secrets while writing multiple files (bsc#1224276)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.33874

Places