Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-0207 (GCVE-0-2024-0207)
Vulnerability from cvelistv5 – Published: 2024-01-03 07:31 – Updated: 2025-06-17 20:29
VLAI?
EPSS
Title
Out-of-bounds Read in Wireshark
Summary
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Severity ?
7.8 (High)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Wireshark Foundation | Wireshark |
Affected:
4.2.0 , < 4.2.1
(semver)
|
Credits
Dexter Gerig
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T17:41:15.947Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"name": "GitLab Issue #19502",
"tags": [
"issue-tracking",
"x_transferred"
],
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-0207",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-01-08T20:42:54.965767Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-17T20:29:08.732Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Wireshark",
"vendor": "Wireshark Foundation",
"versions": [
{
"lessThan": "4.2.1",
"status": "affected",
"version": "4.2.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Dexter Gerig"
}
],
"descriptions": [
{
"lang": "en",
"value": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-29T15:04:53.867Z",
"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
"shortName": "GitLab"
},
"references": [
{
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"name": "GitLab Issue #19502",
"tags": [
"issue-tracking"
],
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to versions 4.2.0 or above."
}
],
"title": "Out-of-bounds Read in Wireshark"
}
},
"cveMetadata": {
"assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
"assignerShortName": "GitLab",
"cveId": "CVE-2024-0207",
"datePublished": "2024-01-03T07:31:10.632Z",
"dateReserved": "2024-01-03T07:30:45.767Z",
"dateUpdated": "2025-06-17T20:29:08.732Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1F212AE9-0C17-4994-8B70-853E941D27E4\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file\"}, {\"lang\": \"es\", \"value\": \"El fallo del disector HTTP3 en Wireshark 4.2.0 permite la denegaci\\u00f3n de servicio mediante inyecci\\u00f3n de paquetes o archivo de captura manipulado\"}]",
"id": "CVE-2024-0207",
"lastModified": "2024-11-21T08:46:03.917",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"cve@gitlab.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}]}",
"published": "2024-01-03T08:15:10.053",
"references": "[{\"url\": \"https://gitlab.com/wireshark/wireshark/-/issues/19502\", \"source\": \"cve@gitlab.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Vendor Advisory\"]}, {\"url\": \"https://www.wireshark.org/security/wnpa-sec-2024-03.html\", \"source\": \"cve@gitlab.com\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"https://gitlab.com/wireshark/wireshark/-/issues/19502\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Vendor Advisory\"]}, {\"url\": \"https://www.wireshark.org/security/wnpa-sec-2024-03.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "cve@gitlab.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"cve@gitlab.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-0207\",\"sourceIdentifier\":\"cve@gitlab.com\",\"published\":\"2024-01-03T08:15:10.053\",\"lastModified\":\"2024-11-21T08:46:03.917\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file\"},{\"lang\":\"es\",\"value\":\"El fallo del disector HTTP3 en Wireshark 4.2.0 permite la denegaci\u00f3n de servicio mediante inyecci\u00f3n de paquetes o archivo de captura manipulado\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cve@gitlab.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"cve@gitlab.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F212AE9-0C17-4994-8B70-853E941D27E4\"}]}]}],\"references\":[{\"url\":\"https://gitlab.com/wireshark/wireshark/-/issues/19502\",\"source\":\"cve@gitlab.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.wireshark.org/security/wnpa-sec-2024-03.html\",\"source\":\"cve@gitlab.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://gitlab.com/wireshark/wireshark/-/issues/19502\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.wireshark.org/security/wnpa-sec-2024-03.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.wireshark.org/security/wnpa-sec-2024-03.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://gitlab.com/wireshark/wireshark/-/issues/19502\", \"name\": \"GitLab Issue #19502\", \"tags\": [\"issue-tracking\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T17:41:15.947Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-0207\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-01-08T20:42:54.965767Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-17T20:24:28.217Z\"}}], \"cna\": {\"title\": \"Out-of-bounds Read in Wireshark\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Dexter Gerig\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Wireshark Foundation\", \"product\": \"Wireshark\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.2.0\", \"lessThan\": \"4.2.1\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to versions 4.2.0 or above.\"}], \"references\": [{\"url\": \"https://www.wireshark.org/security/wnpa-sec-2024-03.html\"}, {\"url\": \"https://gitlab.com/wireshark/wireshark/-/issues/19502\", \"name\": \"GitLab Issue #19502\", \"tags\": [\"issue-tracking\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"ceab7361-8a18-47b1-92ba-4d7d25f6715a\", \"shortName\": \"GitLab\", \"dateUpdated\": \"2024-08-29T15:04:53.867Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-0207\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-17T20:29:08.732Z\", \"dateReserved\": \"2024-01-03T07:30:45.767Z\", \"assignerOrgId\": \"ceab7361-8a18-47b1-92ba-4d7d25f6715a\", \"datePublished\": \"2024-01-03T07:31:10.632Z\", \"assignerShortName\": \"GitLab\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2024-AVI-0007
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Wireshark versions 4.0.x ant\u00e9rieures \u00e0 4.0.12",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
},
{
"description": "Wireshark versions 3.6.x ant\u00e9rieures \u00e0 3.6.20",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
},
{
"description": "Wireshark versions 4.2.x ant\u00e9rieures \u00e0 4.2.1",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-0209",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0209"
},
{
"name": "CVE-2024-0208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0208"
},
{
"name": "CVE-2024-0207",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0207"
},
{
"name": "CVE-2024-0210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0210"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-03 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-01 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-01.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-02 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-02.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-04 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-04.html"
}
],
"reference": "CERTFR-2024-AVI-0007",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-01-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Wireshark\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Wireshark",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-02 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-04 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-01 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-03 du 03 janvier 2024",
"url": null
}
]
}
CERTFR-2024-AVI-0007
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Wireshark versions 4.0.x ant\u00e9rieures \u00e0 4.0.12",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
},
{
"description": "Wireshark versions 3.6.x ant\u00e9rieures \u00e0 3.6.20",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
},
{
"description": "Wireshark versions 4.2.x ant\u00e9rieures \u00e0 4.2.1",
"product": {
"name": "Wireshark",
"vendor": {
"name": "Wireshark",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-0209",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0209"
},
{
"name": "CVE-2024-0208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0208"
},
{
"name": "CVE-2024-0207",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0207"
},
{
"name": "CVE-2024-0210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0210"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-03 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-01 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-01.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-02 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-02.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-04 du 04 janvier 2024",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-04.html"
}
],
"reference": "CERTFR-2024-AVI-0007",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-01-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Wireshark\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Wireshark",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-02 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-04 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-01 du 03 janvier 2024",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Wireshark wnpa-sec-2024-03 du 03 janvier 2024",
"url": null
}
]
}
OPENSUSE-SU-2024:13556-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
libwireshark17-4.2.1-1.1 on GA media
Notes
Title of the patch
libwireshark17-4.2.1-1.1 on GA media
Description of the patch
These are all security issues fixed in the libwireshark17-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13556
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libwireshark17-4.2.1-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libwireshark17-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-13556",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13556-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0208 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0209 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0211/"
}
],
"title": "libwireshark17-4.2.1-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:13556-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.1-1.1.aarch64",
"product": {
"name": "libwireshark17-4.2.1-1.1.aarch64",
"product_id": "libwireshark17-4.2.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.1-1.1.aarch64",
"product": {
"name": "libwiretap14-4.2.1-1.1.aarch64",
"product_id": "libwiretap14-4.2.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.1-1.1.aarch64",
"product": {
"name": "libwsutil15-4.2.1-1.1.aarch64",
"product_id": "libwsutil15-4.2.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.1-1.1.aarch64",
"product": {
"name": "wireshark-4.2.1-1.1.aarch64",
"product_id": "wireshark-4.2.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.1-1.1.aarch64",
"product": {
"name": "wireshark-devel-4.2.1-1.1.aarch64",
"product_id": "wireshark-devel-4.2.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.1-1.1.aarch64",
"product": {
"name": "wireshark-ui-qt-4.2.1-1.1.aarch64",
"product_id": "wireshark-ui-qt-4.2.1-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.1-1.1.ppc64le",
"product": {
"name": "libwireshark17-4.2.1-1.1.ppc64le",
"product_id": "libwireshark17-4.2.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.1-1.1.ppc64le",
"product": {
"name": "libwiretap14-4.2.1-1.1.ppc64le",
"product_id": "libwiretap14-4.2.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.1-1.1.ppc64le",
"product": {
"name": "libwsutil15-4.2.1-1.1.ppc64le",
"product_id": "libwsutil15-4.2.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.1-1.1.ppc64le",
"product": {
"name": "wireshark-4.2.1-1.1.ppc64le",
"product_id": "wireshark-4.2.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.1-1.1.ppc64le",
"product": {
"name": "wireshark-devel-4.2.1-1.1.ppc64le",
"product_id": "wireshark-devel-4.2.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.1-1.1.ppc64le",
"product": {
"name": "wireshark-ui-qt-4.2.1-1.1.ppc64le",
"product_id": "wireshark-ui-qt-4.2.1-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.1-1.1.s390x",
"product": {
"name": "libwireshark17-4.2.1-1.1.s390x",
"product_id": "libwireshark17-4.2.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.1-1.1.s390x",
"product": {
"name": "libwiretap14-4.2.1-1.1.s390x",
"product_id": "libwiretap14-4.2.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.1-1.1.s390x",
"product": {
"name": "libwsutil15-4.2.1-1.1.s390x",
"product_id": "libwsutil15-4.2.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.1-1.1.s390x",
"product": {
"name": "wireshark-4.2.1-1.1.s390x",
"product_id": "wireshark-4.2.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.1-1.1.s390x",
"product": {
"name": "wireshark-devel-4.2.1-1.1.s390x",
"product_id": "wireshark-devel-4.2.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.1-1.1.s390x",
"product": {
"name": "wireshark-ui-qt-4.2.1-1.1.s390x",
"product_id": "wireshark-ui-qt-4.2.1-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.1-1.1.x86_64",
"product": {
"name": "libwireshark17-4.2.1-1.1.x86_64",
"product_id": "libwireshark17-4.2.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.1-1.1.x86_64",
"product": {
"name": "libwiretap14-4.2.1-1.1.x86_64",
"product_id": "libwiretap14-4.2.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.1-1.1.x86_64",
"product": {
"name": "libwsutil15-4.2.1-1.1.x86_64",
"product_id": "libwsutil15-4.2.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.1-1.1.x86_64",
"product": {
"name": "wireshark-4.2.1-1.1.x86_64",
"product_id": "wireshark-4.2.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.1-1.1.x86_64",
"product": {
"name": "wireshark-devel-4.2.1-1.1.x86_64",
"product_id": "wireshark-devel-4.2.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.1-1.1.x86_64",
"product": {
"name": "wireshark-ui-qt-4.2.1-1.1.x86_64",
"product_id": "wireshark-ui-qt-4.2.1-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64"
},
"product_reference": "libwireshark17-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le"
},
"product_reference": "libwireshark17-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x"
},
"product_reference": "libwireshark17-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64"
},
"product_reference": "libwireshark17-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64"
},
"product_reference": "libwiretap14-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le"
},
"product_reference": "libwiretap14-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x"
},
"product_reference": "libwiretap14-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64"
},
"product_reference": "libwiretap14-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64"
},
"product_reference": "libwsutil15-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le"
},
"product_reference": "libwsutil15-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x"
},
"product_reference": "libwsutil15-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64"
},
"product_reference": "libwsutil15-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64"
},
"product_reference": "wireshark-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le"
},
"product_reference": "wireshark-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x"
},
"product_reference": "wireshark-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64"
},
"product_reference": "wireshark-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64"
},
"product_reference": "wireshark-devel-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le"
},
"product_reference": "wireshark-devel-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x"
},
"product_reference": "wireshark-devel-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64"
},
"product_reference": "wireshark-devel-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64"
},
"product_reference": "wireshark-ui-qt-4.2.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le"
},
"product_reference": "wireshark-ui-qt-4.2.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x"
},
"product_reference": "wireshark-ui-qt-4.2.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
},
"product_reference": "wireshark-ui-qt-4.2.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-0207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0207"
}
],
"notes": [
{
"category": "general",
"text": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0207",
"url": "https://www.suse.com/security/cve/CVE-2024-0207"
},
{
"category": "external",
"summary": "SUSE Bug 1218503 for CVE-2024-0207",
"url": "https://bugzilla.suse.com/1218503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-0207"
},
{
"cve": "CVE-2024-0208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0208"
}
],
"notes": [
{
"category": "general",
"text": "GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0208",
"url": "https://www.suse.com/security/cve/CVE-2024-0208"
},
{
"category": "external",
"summary": "SUSE Bug 1218504 for CVE-2024-0208",
"url": "https://bugzilla.suse.com/1218504"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-0208"
},
{
"cve": "CVE-2024-0209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0209"
}
],
"notes": [
{
"category": "general",
"text": "IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0209",
"url": "https://www.suse.com/security/cve/CVE-2024-0209"
},
{
"category": "external",
"summary": "SUSE Bug 1218505 for CVE-2024-0209",
"url": "https://bugzilla.suse.com/1218505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-0209"
},
{
"cve": "CVE-2024-0210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0210"
}
],
"notes": [
{
"category": "general",
"text": "Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0210",
"url": "https://www.suse.com/security/cve/CVE-2024-0210"
},
{
"category": "external",
"summary": "SUSE Bug 1218506 for CVE-2024-0210",
"url": "https://bugzilla.suse.com/1218506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-0210"
},
{
"cve": "CVE-2024-0211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0211"
}
],
"notes": [
{
"category": "general",
"text": "DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0211",
"url": "https://www.suse.com/security/cve/CVE-2024-0211"
},
{
"category": "external",
"summary": "SUSE Bug 1218507 for CVE-2024-0211",
"url": "https://bugzilla.suse.com/1218507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwireshark17-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwiretap14-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:libwsutil15-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-devel-4.2.1-1.1.x86_64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.aarch64",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.ppc64le",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.s390x",
"openSUSE Tumbleweed:wireshark-ui-qt-4.2.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-0211"
}
]
}
FKIE_CVE-2024-0207
Vulnerability from fkie_nvd - Published: 2024-01-03 08:15 - Updated: 2024-11-21 08:46
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
References
| URL | Tags | ||
|---|---|---|---|
| cve@gitlab.com | https://gitlab.com/wireshark/wireshark/-/issues/19502 | Exploit, Issue Tracking, Vendor Advisory | |
| cve@gitlab.com | https://www.wireshark.org/security/wnpa-sec-2024-03.html | Exploit, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://gitlab.com/wireshark/wireshark/-/issues/19502 | Exploit, Issue Tracking, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.wireshark.org/security/wnpa-sec-2024-03.html | Exploit, Vendor Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1F212AE9-0C17-4994-8B70-853E941D27E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file"
},
{
"lang": "es",
"value": "El fallo del disector HTTP3 en Wireshark 4.2.0 permite la denegaci\u00f3n de servicio mediante inyecci\u00f3n de paquetes o archivo de captura manipulado"
}
],
"id": "CVE-2024-0207",
"lastModified": "2024-11-21T08:46:03.917",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "cve@gitlab.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2024-01-03T08:15:10.053",
"references": [
{
"source": "cve@gitlab.com",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
},
{
"source": "cve@gitlab.com",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
}
],
"sourceIdentifier": "cve@gitlab.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "cve@gitlab.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
WID-SEC-W-2024-0007
Vulnerability from csaf_certbund - Published: 2024-01-03 23:00 - Updated: 2024-09-29 22:00Summary
Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Wireshark ist eine Software zum Mitschneiden von Netzwerkverkehr und zur Analyse von Netzwerkprotokollen.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Linux
- MacOS X
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Wireshark ist eine Software zum Mitschneiden von Netzwerkverkehr und zur Analyse von Netzwerkprotokollen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- MacOS X\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0007 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0007.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0007 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0007"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0058-1 vom 2024-01-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017597.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0058-1 vom 2024-01-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017596.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0058-1 vom 2024-01-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017595.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-FDC7DFB959 vom 2024-02-01",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-fdc7dfb959"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-B72131479B vom 2024-02-01",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-b72131479b"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2441 vom 2024-02-06",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2441.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2416 vom 2024-01-23",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2416.html"
},
{
"category": "external",
"summary": "Wireshark-announce: Wireshark 4.2.1 is now available vom 2024-01-03",
"url": "https://www.wireshark.org/lists/wireshark-announce/202401/msg00000.html"
},
{
"category": "external",
"summary": "Wireshark-announce: Wireshark 4.0.12 is now available vom 2024-01-03",
"url": "https://www.wireshark.org/lists/wireshark-announce/202401/msg00001.html"
},
{
"category": "external",
"summary": "Wireshark-announce: Wireshark 3.6.20 is now available vom 2024-01-03",
"url": "https://www.wireshark.org/lists/wireshark-announce/202401/msg00002.html"
},
{
"category": "external",
"summary": "Wireshark Security Advisory vom 2024-01-03",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-01.html"
},
{
"category": "external",
"summary": "Wireshark Security Advisory vom 2024-01-03",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-02.html"
},
{
"category": "external",
"summary": "Wireshark Security Advisory vom 2024-01-03",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"category": "external",
"summary": "Wireshark Security Advisory vom 2024-01-03",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-04.html"
},
{
"category": "external",
"summary": "Wireshark Security Advisory vom 2024-01-03",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-05.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:3165-1 vom 2024-09-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019395.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3906 vom 2024-09-30",
"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
}
],
"source_lang": "en-US",
"title": "Wireshark: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
"tracking": {
"current_release_date": "2024-09-29T22:00:00.000+00:00",
"generator": {
"date": "2024-09-30T11:14:49.380+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-0007",
"initial_release_date": "2024-01-03T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-01-03T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-01-08T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-01-22T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-02-01T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2024-02-05T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-09-09T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-09-29T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Debian aufgenommen"
}
],
"status": "final",
"version": "7"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.2.1",
"product": {
"name": "Open Source Wireshark \u003c4.2.1",
"product_id": "T031865"
}
},
{
"category": "product_version",
"name": "4.2.1",
"product": {
"name": "Open Source Wireshark 4.2.1",
"product_id": "T031865-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:wireshark:wireshark:4.2.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c4.0.12",
"product": {
"name": "Open Source Wireshark \u003c4.0.12",
"product_id": "T031866"
}
},
{
"category": "product_version",
"name": "4.0.12",
"product": {
"name": "Open Source Wireshark 4.0.12",
"product_id": "T031866-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:wireshark:wireshark:4.0.12"
}
}
},
{
"category": "product_version_range",
"name": "\u003c3.6.20",
"product": {
"name": "Open Source Wireshark \u003c3.6.20",
"product_id": "T031867"
}
},
{
"category": "product_version",
"name": "3.6.20",
"product": {
"name": "Open Source Wireshark 3.6.20",
"product_id": "T031867-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:wireshark:wireshark:3.6.20"
}
}
}
],
"category": "product_name",
"name": "Wireshark"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-0207",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Wireshark. Diese Schwachstellen bestehen in den GVCP-, IEEE 1609.2-, HTTP3- und Zigbee TLV-Dissektor-Komponenten aufgrund einer unsachgem\u00e4\u00dfen Neutralisierung von Benutzereingaben. Durch Einschleusen eines fehlerhaften Pakets in die Leitung oder in eine Capture-Datei kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service-Zustand auszul\u00f6sen. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"T031865",
"T031867",
"T031866",
"398363",
"74185"
]
},
"release_date": "2024-01-03T23:00:00.000+00:00",
"title": "CVE-2024-0207"
},
{
"cve": "CVE-2024-0208",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Wireshark. Diese Schwachstellen bestehen in den GVCP-, IEEE 1609.2-, HTTP3- und Zigbee TLV-Dissektor-Komponenten aufgrund einer unsachgem\u00e4\u00dfen Neutralisierung von Benutzereingaben. Durch Einschleusen eines fehlerhaften Pakets in die Leitung oder in eine Capture-Datei kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service-Zustand auszul\u00f6sen. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"T031865",
"T031867",
"T031866",
"398363",
"74185"
]
},
"release_date": "2024-01-03T23:00:00.000+00:00",
"title": "CVE-2024-0208"
},
{
"cve": "CVE-2024-0209",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Wireshark. Diese Schwachstellen bestehen in den GVCP-, IEEE 1609.2-, HTTP3- und Zigbee TLV-Dissektor-Komponenten aufgrund einer unsachgem\u00e4\u00dfen Neutralisierung von Benutzereingaben. Durch Einschleusen eines fehlerhaften Pakets in die Leitung oder in eine Capture-Datei kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service-Zustand auszul\u00f6sen. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"T031865",
"T031867",
"T031866",
"398363",
"74185"
]
},
"release_date": "2024-01-03T23:00:00.000+00:00",
"title": "CVE-2024-0209"
},
{
"cve": "CVE-2024-0210",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Wireshark. Diese Schwachstellen bestehen in den GVCP-, IEEE 1609.2-, HTTP3- und Zigbee TLV-Dissektor-Komponenten aufgrund einer unsachgem\u00e4\u00dfen Neutralisierung von Benutzereingaben. Durch Einschleusen eines fehlerhaften Pakets in die Leitung oder in eine Capture-Datei kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service-Zustand auszul\u00f6sen. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"T031865",
"T031867",
"T031866",
"398363",
"74185"
]
},
"release_date": "2024-01-03T23:00:00.000+00:00",
"title": "CVE-2024-0210"
},
{
"cve": "CVE-2024-0211",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Wireshark. Diese Schwachstellen bestehen in den GVCP-, IEEE 1609.2-, HTTP3- und Zigbee TLV-Dissektor-Komponenten aufgrund einer unsachgem\u00e4\u00dfen Neutralisierung von Benutzereingaben. Durch Einschleusen eines fehlerhaften Pakets in die Leitung oder in eine Capture-Datei kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service-Zustand auszul\u00f6sen. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"T031865",
"T031867",
"T031866",
"398363",
"74185"
]
},
"release_date": "2024-01-03T23:00:00.000+00:00",
"title": "CVE-2024-0211"
}
]
}
WID-SEC-W-2024-1248
Vulnerability from csaf_certbund - Published: 2024-05-28 22:00 - Updated: 2024-11-21 23:00Summary
Xerox FreeFlow Print Server: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden
Betroffene Betriebssysteme
- Sonstiges
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "FreeFlow-Druckserver ist eine Druckserveranwendung f\u00fcr Xerox-Produktionsdrucker, die Flexibilit\u00e4t, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1248 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1248.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1248 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1248"
},
{
"category": "external",
"summary": "Xerox Security Bulletin XRX24-010 vom 2024-05-28",
"url": "https://security.business.xerox.com/wp-content/uploads/2024/05/Xerox-Security-Bulletin-XRX24-010-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2688 vom 2024-11-01",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2688.html"
},
{
"category": "external",
"summary": "XEROX Security Advisory XRX24-017 vom 2024-11-21",
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf"
}
],
"source_lang": "en-US",
"title": "Xerox FreeFlow Print Server: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-11-21T23:00:00.000+00:00",
"generator": {
"date": "2024-11-22T10:06:51.860+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-1248",
"initial_release_date": "2024-05-28T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-05-28T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-10-31T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-11-21T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von XEROX aufgenommen"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "v9",
"product": {
"name": "Xerox FreeFlow Print Server v9",
"product_id": "T015632",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:v9"
}
}
},
{
"category": "product_version",
"name": "v7",
"product": {
"name": "Xerox FreeFlow Print Server v7",
"product_id": "T035098",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:v7"
}
}
}
],
"category": "product_name",
"name": "FreeFlow Print Server"
}
],
"category": "vendor",
"name": "Xerox"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-10401",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2014-10401"
},
{
"cve": "CVE-2014-10402",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2014-10402"
},
{
"cve": "CVE-2020-22218",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2020-22218"
},
{
"cve": "CVE-2020-27545",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2020-27545"
},
{
"cve": "CVE-2020-28162",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2020-28162"
},
{
"cve": "CVE-2020-28163",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2020-28163"
},
{
"cve": "CVE-2022-22817",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-22817"
},
{
"cve": "CVE-2022-32200",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-32200"
},
{
"cve": "CVE-2022-34299",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-34299"
},
{
"cve": "CVE-2022-39170",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-39170"
},
{
"cve": "CVE-2022-40982",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-40982"
},
{
"cve": "CVE-2022-46285",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-46285"
},
{
"cve": "CVE-2022-46344",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2022-46344"
},
{
"cve": "CVE-2023-22053",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-22053"
},
{
"cve": "CVE-2023-27371",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-27371"
},
{
"cve": "CVE-2023-34872",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-34872"
},
{
"cve": "CVE-2023-38408",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-38408"
},
{
"cve": "CVE-2023-38709",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-38709"
},
{
"cve": "CVE-2023-39326",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-39326"
},
{
"cve": "CVE-2023-39615",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-39615"
},
{
"cve": "CVE-2023-40305",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-40305"
},
{
"cve": "CVE-2023-40745",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-40745"
},
{
"cve": "CVE-2023-41175",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-41175"
},
{
"cve": "CVE-2023-43785",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-43785"
},
{
"cve": "CVE-2023-43786",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-43786"
},
{
"cve": "CVE-2023-43787",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-43787"
},
{
"cve": "CVE-2023-43788",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-43788"
},
{
"cve": "CVE-2023-43789",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-43789"
},
{
"cve": "CVE-2023-4408",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-4408"
},
{
"cve": "CVE-2023-44487",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-44487"
},
{
"cve": "CVE-2023-45285",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-45285"
},
{
"cve": "CVE-2023-46589",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46589"
},
{
"cve": "CVE-2023-46728",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46728"
},
{
"cve": "CVE-2023-4675",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-4675"
},
{
"cve": "CVE-2023-46751",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46751"
},
{
"cve": "CVE-2023-46809",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46809"
},
{
"cve": "CVE-2023-46846",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46846"
},
{
"cve": "CVE-2023-46847",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46847"
},
{
"cve": "CVE-2023-46848",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-46848"
},
{
"cve": "CVE-2023-47038",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-47038"
},
{
"cve": "CVE-2023-47100",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-47100"
},
{
"cve": "CVE-2023-48795",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-49285",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49285"
},
{
"cve": "CVE-2023-49286",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49286"
},
{
"cve": "CVE-2023-49288",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49288"
},
{
"cve": "CVE-2023-49990",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49990"
},
{
"cve": "CVE-2023-49991",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49991"
},
{
"cve": "CVE-2023-49992",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49992"
},
{
"cve": "CVE-2023-49993",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49993"
},
{
"cve": "CVE-2023-49994",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-49994"
},
{
"cve": "CVE-2023-50387",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-50387"
},
{
"cve": "CVE-2023-50447",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-50447"
},
{
"cve": "CVE-2023-50761",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-50761"
},
{
"cve": "CVE-2023-50762",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-50762"
},
{
"cve": "CVE-2023-50868",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-50868"
},
{
"cve": "CVE-2023-51384",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-51384"
},
{
"cve": "CVE-2023-51385",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-51385"
},
{
"cve": "CVE-2023-51713",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-51713"
},
{
"cve": "CVE-2023-51765",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-51765"
},
{
"cve": "CVE-2023-52355",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-52355"
},
{
"cve": "CVE-2023-52356",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-52356"
},
{
"cve": "CVE-2023-5363",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5363"
},
{
"cve": "CVE-2023-5367",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5367"
},
{
"cve": "CVE-2023-5371",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5371"
},
{
"cve": "CVE-2023-5380",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5380"
},
{
"cve": "CVE-2023-5388",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5388"
},
{
"cve": "CVE-2023-5517",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5517"
},
{
"cve": "CVE-2023-5574",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5574"
},
{
"cve": "CVE-2023-5679",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5679"
},
{
"cve": "CVE-2023-5764",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5764"
},
{
"cve": "CVE-2023-5824",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-5824"
},
{
"cve": "CVE-2023-6174",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6174"
},
{
"cve": "CVE-2023-6175",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6175"
},
{
"cve": "CVE-2023-6377",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6377"
},
{
"cve": "CVE-2023-6478",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6478"
},
{
"cve": "CVE-2023-6516",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6516"
},
{
"cve": "CVE-2023-6856",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6856"
},
{
"cve": "CVE-2023-6857",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6857"
},
{
"cve": "CVE-2023-6858",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6858"
},
{
"cve": "CVE-2023-6859",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6859"
},
{
"cve": "CVE-2023-6860",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6860"
},
{
"cve": "CVE-2023-6861",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6861"
},
{
"cve": "CVE-2023-6862",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6862"
},
{
"cve": "CVE-2023-6863",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6863"
},
{
"cve": "CVE-2023-6864",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6864"
},
{
"cve": "CVE-2023-6865",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6865"
},
{
"cve": "CVE-2023-6867",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2023-6867"
},
{
"cve": "CVE-2024-0207",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0207"
},
{
"cve": "CVE-2024-0208",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0208"
},
{
"cve": "CVE-2024-0209",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0209"
},
{
"cve": "CVE-2024-0210",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0210"
},
{
"cve": "CVE-2024-0211",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0211"
},
{
"cve": "CVE-2024-0727",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0727"
},
{
"cve": "CVE-2024-0741",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0741"
},
{
"cve": "CVE-2024-0742",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0742"
},
{
"cve": "CVE-2024-0743",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0743"
},
{
"cve": "CVE-2024-0746",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0746"
},
{
"cve": "CVE-2024-0747",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0747"
},
{
"cve": "CVE-2024-0749",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0749"
},
{
"cve": "CVE-2024-0750",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0750"
},
{
"cve": "CVE-2024-0751",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0751"
},
{
"cve": "CVE-2024-0753",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0753"
},
{
"cve": "CVE-2024-0755",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-0755"
},
{
"cve": "CVE-2024-1546",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1546"
},
{
"cve": "CVE-2024-1547",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1547"
},
{
"cve": "CVE-2024-1548",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1548"
},
{
"cve": "CVE-2024-1549",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1549"
},
{
"cve": "CVE-2024-1550",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1550"
},
{
"cve": "CVE-2024-1551",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1551"
},
{
"cve": "CVE-2024-1552",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1552"
},
{
"cve": "CVE-2024-1553",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-1553"
},
{
"cve": "CVE-2024-20999",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-20999"
},
{
"cve": "CVE-2024-21011",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21011"
},
{
"cve": "CVE-2024-21059",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21059"
},
{
"cve": "CVE-2024-21068",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21068"
},
{
"cve": "CVE-2024-21085",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21085"
},
{
"cve": "CVE-2024-21094",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21094"
},
{
"cve": "CVE-2024-21105",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21105"
},
{
"cve": "CVE-2024-21890",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21890"
},
{
"cve": "CVE-2024-21891",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21891"
},
{
"cve": "CVE-2024-21896",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-21896"
},
{
"cve": "CVE-2024-22019",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-22019"
},
{
"cve": "CVE-2024-22195",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-22195"
},
{
"cve": "CVE-2024-24680",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-24680"
},
{
"cve": "CVE-2024-24795",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-24795"
},
{
"cve": "CVE-2024-24806",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-24806"
},
{
"cve": "CVE-2024-25617",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-25617"
},
{
"cve": "CVE-2024-2605",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2605"
},
{
"cve": "CVE-2024-2607",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2607"
},
{
"cve": "CVE-2024-2608",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2608"
},
{
"cve": "CVE-2024-2610",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2610"
},
{
"cve": "CVE-2024-2611",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2611"
},
{
"cve": "CVE-2024-2612",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2612"
},
{
"cve": "CVE-2024-2614",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2614"
},
{
"cve": "CVE-2024-2616",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-2616"
},
{
"cve": "CVE-2024-27316",
"notes": [
{
"category": "description",
"text": "In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Schwachstellen in unter anderem OpenJDK, Apache und Mozilla Firefox. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden."
}
],
"product_status": {
"known_affected": [
"398363",
"T015632",
"T035098"
]
},
"release_date": "2024-05-28T22:00:00.000+00:00",
"title": "CVE-2024-27316"
}
]
}
GSD-2024-0207
Vulnerability from gsd - Updated: 2024-01-04 06:02Details
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-0207"
],
"details": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"id": "GSD-2024-0207",
"modified": "2024-01-04T06:02:16.013049Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@gitlab.com",
"ID": "CVE-2024-0207",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Wireshark",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.2.0",
"version_value": "4.2.1"
}
]
}
}
]
},
"vendor_name": "Wireshark Foundation"
}
]
}
},
"credits": [
{
"lang": "en",
"value": "Dexter Gerig"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file"
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-125",
"lang": "eng",
"value": "CWE-125: Out-of-bounds Read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.wireshark.org/security/wnpa-sec-2024-03.html",
"refsource": "MISC",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
},
{
"name": "https://gitlab.com/wireshark/wireshark/-/issues/19502",
"refsource": "MISC",
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
}
]
},
"solution": [
{
"lang": "en",
"value": "Upgrade to versions 4.2.0 or above."
}
]
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1F212AE9-0C17-4994-8B70-853E941D27E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file"
},
{
"lang": "es",
"value": "El fallo del disector HTTP3 en Wireshark 4.2.0 permite la denegaci\u00f3n de servicio mediante inyecci\u00f3n de paquetes o archivo de captura manipulado"
}
],
"id": "CVE-2024-0207",
"lastModified": "2024-01-09T19:10:05.427",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "cve@gitlab.com",
"type": "Secondary"
}
]
},
"published": "2024-01-03T08:15:10.053",
"references": [
{
"source": "cve@gitlab.com",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
},
{
"source": "cve@gitlab.com",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
}
],
"sourceIdentifier": "cve@gitlab.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "cve@gitlab.com",
"type": "Secondary"
}
]
}
}
}
}
GHSA-5QQV-6F97-M7HW
Vulnerability from github – Published: 2024-01-03 09:30 – Updated: 2024-01-03 09:30
VLAI?
Details
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Severity ?
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2024-0207"
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-03T08:15:10Z",
"severity": "HIGH"
},
"details": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"id": "GHSA-5qqv-6f97-m7hw",
"modified": "2024-01-03T09:30:30Z",
"published": "2024-01-03T09:30:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0207"
},
{
"type": "WEB",
"url": "https://gitlab.com/wireshark/wireshark/-/issues/19502"
},
{
"type": "WEB",
"url": "https://www.wireshark.org/security/wnpa-sec-2024-03.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
SUSE-SU-2024:3165-1
Vulnerability from csaf_suse - Published: 2024-09-09 07:25 - Updated: 2024-09-09 07:25Summary
Security update for wireshark
Notes
Title of the patch
Security update for wireshark
Description of the patch
This update for wireshark fixes the following issues:
wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):
- Security issues fixed with this update:
* CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
* CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
* CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
* CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
* CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
* CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
* CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
* CVE-2023-2854: BLF file parser crash (bsc#1211708)
* CVE-2023-0666: RTPS dissector crash (bsc#1211709)
* CVE-2023-0414: EAP dissector crash (bsc#1207666)
- Major changes introduced with versions 4.2.0 and 4.0.0:
* Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
* Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html
- Added an aditional desktopfile to start wireshark which asks for
the super user password.
Patchnames
SUSE-2024-3165,SUSE-SLE-Module-Basesystem-15-SP6-2024-3165,SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3165,openSUSE-SLE-15.6-2024-3165
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for wireshark",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for wireshark fixes the following issues:\n\nwireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):\n\n- Security issues fixed with this update:\n\n * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)\n * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)\n * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)\n * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)\n * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)\n * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)\n * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)\n * CVE-2023-2854: BLF file parser crash (bsc#1211708)\n * CVE-2023-0666: RTPS dissector crash (bsc#1211709)\n * CVE-2023-0414: EAP dissector crash (bsc#1207666)\n\n- Major changes introduced with versions 4.2.0 and 4.0.0:\n\n * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html\n * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html\n\n- Added an aditional desktopfile to start wireshark which asks for\n the super user password.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3165,SUSE-SLE-Module-Basesystem-15-SP6-2024-3165,SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3165,openSUSE-SLE-15.6-2024-3165",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3165-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3165-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3165-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-September/036824.html"
},
{
"category": "self",
"summary": "SUSE Bug 1207666",
"url": "https://bugzilla.suse.com/1207666"
},
{
"category": "self",
"summary": "SUSE Bug 1211708",
"url": "https://bugzilla.suse.com/1211708"
},
{
"category": "self",
"summary": "SUSE Bug 1211709",
"url": "https://bugzilla.suse.com/1211709"
},
{
"category": "self",
"summary": "SUSE Bug 1213318",
"url": "https://bugzilla.suse.com/1213318"
},
{
"category": "self",
"summary": "SUSE Bug 1215959",
"url": "https://bugzilla.suse.com/1215959"
},
{
"category": "self",
"summary": "SUSE Bug 1217247",
"url": "https://bugzilla.suse.com/1217247"
},
{
"category": "self",
"summary": "SUSE Bug 1217272",
"url": "https://bugzilla.suse.com/1217272"
},
{
"category": "self",
"summary": "SUSE Bug 1218503",
"url": "https://bugzilla.suse.com/1218503"
},
{
"category": "self",
"summary": "SUSE Bug 1218506",
"url": "https://bugzilla.suse.com/1218506"
},
{
"category": "self",
"summary": "SUSE Bug 1218507",
"url": "https://bugzilla.suse.com/1218507"
},
{
"category": "self",
"summary": "SUSE Bug 1222030",
"url": "https://bugzilla.suse.com/1222030"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0414 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0666 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2854 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3649 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-5371 page",
"url": "https://www.suse.com/security/cve/CVE-2023-5371/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6174 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6175 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-0211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-0211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-2955 page",
"url": "https://www.suse.com/security/cve/CVE-2024-2955/"
}
],
"title": "Security update for wireshark",
"tracking": {
"current_release_date": "2024-09-09T07:25:24Z",
"generator": {
"date": "2024-09-09T07:25:24Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3165-1",
"initial_release_date": "2024-09-09T07:25:24Z",
"revision_history": [
{
"date": "2024-09-09T07:25:24Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "libwireshark17-4.2.6-150600.18.6.1.aarch64",
"product_id": "libwireshark17-4.2.6-150600.18.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "libwiretap14-4.2.6-150600.18.6.1.aarch64",
"product_id": "libwiretap14-4.2.6-150600.18.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "libwsutil15-4.2.6-150600.18.6.1.aarch64",
"product_id": "libwsutil15-4.2.6-150600.18.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "wireshark-4.2.6-150600.18.6.1.aarch64",
"product_id": "wireshark-4.2.6-150600.18.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"product_id": "wireshark-devel-4.2.6-150600.18.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"product": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"product_id": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.6-150600.18.6.1.i586",
"product": {
"name": "libwireshark17-4.2.6-150600.18.6.1.i586",
"product_id": "libwireshark17-4.2.6-150600.18.6.1.i586"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.6-150600.18.6.1.i586",
"product": {
"name": "libwiretap14-4.2.6-150600.18.6.1.i586",
"product_id": "libwiretap14-4.2.6-150600.18.6.1.i586"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.6-150600.18.6.1.i586",
"product": {
"name": "libwsutil15-4.2.6-150600.18.6.1.i586",
"product_id": "libwsutil15-4.2.6-150600.18.6.1.i586"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.6-150600.18.6.1.i586",
"product": {
"name": "wireshark-4.2.6-150600.18.6.1.i586",
"product_id": "wireshark-4.2.6-150600.18.6.1.i586"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.6-150600.18.6.1.i586",
"product": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.i586",
"product_id": "wireshark-devel-4.2.6-150600.18.6.1.i586"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.i586",
"product": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.i586",
"product_id": "wireshark-ui-qt-4.2.6-150600.18.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"product_id": "libwireshark17-4.2.6-150600.18.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"product_id": "libwiretap14-4.2.6-150600.18.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"product_id": "libwsutil15-4.2.6-150600.18.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "wireshark-4.2.6-150600.18.6.1.ppc64le",
"product_id": "wireshark-4.2.6-150600.18.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"product_id": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"product": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"product_id": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "libwireshark17-4.2.6-150600.18.6.1.s390x",
"product_id": "libwireshark17-4.2.6-150600.18.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "libwiretap14-4.2.6-150600.18.6.1.s390x",
"product_id": "libwiretap14-4.2.6-150600.18.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "libwsutil15-4.2.6-150600.18.6.1.s390x",
"product_id": "libwsutil15-4.2.6-150600.18.6.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "wireshark-4.2.6-150600.18.6.1.s390x",
"product_id": "wireshark-4.2.6-150600.18.6.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.s390x",
"product_id": "wireshark-devel-4.2.6-150600.18.6.1.s390x"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"product": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"product_id": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libwireshark17-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "libwireshark17-4.2.6-150600.18.6.1.x86_64",
"product_id": "libwireshark17-4.2.6-150600.18.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwiretap14-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "libwiretap14-4.2.6-150600.18.6.1.x86_64",
"product_id": "libwiretap14-4.2.6-150600.18.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libwsutil15-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "libwsutil15-4.2.6-150600.18.6.1.x86_64",
"product_id": "libwsutil15-4.2.6-150600.18.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "wireshark-4.2.6-150600.18.6.1.x86_64",
"product_id": "wireshark-4.2.6-150600.18.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"product_id": "wireshark-devel-4.2.6-150600.18.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"product": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"product_id": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwireshark17-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwireshark17-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwiretap14-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwiretap14-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwsutil15-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "libwsutil15-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-devel-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
},
"product_reference": "wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-0414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0414"
}
],
"notes": [
{
"category": "general",
"text": "Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0414",
"url": "https://www.suse.com/security/cve/CVE-2023-0414"
},
{
"category": "external",
"summary": "SUSE Bug 1207666 for CVE-2023-0414",
"url": "https://bugzilla.suse.com/1207666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-0414"
},
{
"cve": "CVE-2023-0666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0666"
}
],
"notes": [
{
"category": "general",
"text": "Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0666",
"url": "https://www.suse.com/security/cve/CVE-2023-0666"
},
{
"category": "external",
"summary": "SUSE Bug 1211709 for CVE-2023-0666",
"url": "https://bugzilla.suse.com/1211709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-0666"
},
{
"cve": "CVE-2023-2854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2854"
}
],
"notes": [
{
"category": "general",
"text": "BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2854",
"url": "https://www.suse.com/security/cve/CVE-2023-2854"
},
{
"category": "external",
"summary": "SUSE Bug 1211708 for CVE-2023-2854",
"url": "https://bugzilla.suse.com/1211708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-2854"
},
{
"cve": "CVE-2023-3649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3649"
}
],
"notes": [
{
"category": "general",
"text": "iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3649",
"url": "https://www.suse.com/security/cve/CVE-2023-3649"
},
{
"category": "external",
"summary": "SUSE Bug 1213318 for CVE-2023-3649",
"url": "https://bugzilla.suse.com/1213318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-3649"
},
{
"cve": "CVE-2023-5371",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-5371"
}
],
"notes": [
{
"category": "general",
"text": "RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-5371",
"url": "https://www.suse.com/security/cve/CVE-2023-5371"
},
{
"category": "external",
"summary": "SUSE Bug 1215959 for CVE-2023-5371",
"url": "https://bugzilla.suse.com/1215959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-5371"
},
{
"cve": "CVE-2023-6174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6174"
}
],
"notes": [
{
"category": "general",
"text": "SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6174",
"url": "https://www.suse.com/security/cve/CVE-2023-6174"
},
{
"category": "external",
"summary": "SUSE Bug 1217247 for CVE-2023-6174",
"url": "https://bugzilla.suse.com/1217247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-6174"
},
{
"cve": "CVE-2023-6175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6175"
}
],
"notes": [
{
"category": "general",
"text": "NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6175",
"url": "https://www.suse.com/security/cve/CVE-2023-6175"
},
{
"category": "external",
"summary": "SUSE Bug 1217272 for CVE-2023-6175",
"url": "https://bugzilla.suse.com/1217272"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "moderate"
}
],
"title": "CVE-2023-6175"
},
{
"cve": "CVE-2024-0207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0207"
}
],
"notes": [
{
"category": "general",
"text": "HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0207",
"url": "https://www.suse.com/security/cve/CVE-2024-0207"
},
{
"category": "external",
"summary": "SUSE Bug 1218503 for CVE-2024-0207",
"url": "https://bugzilla.suse.com/1218503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "important"
}
],
"title": "CVE-2024-0207"
},
{
"cve": "CVE-2024-0210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0210"
}
],
"notes": [
{
"category": "general",
"text": "Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0210",
"url": "https://www.suse.com/security/cve/CVE-2024-0210"
},
{
"category": "external",
"summary": "SUSE Bug 1218506 for CVE-2024-0210",
"url": "https://bugzilla.suse.com/1218506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "important"
}
],
"title": "CVE-2024-0210"
},
{
"cve": "CVE-2024-0211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-0211"
}
],
"notes": [
{
"category": "general",
"text": "DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-0211",
"url": "https://www.suse.com/security/cve/CVE-2024-0211"
},
{
"category": "external",
"summary": "SUSE Bug 1218507 for CVE-2024-0211",
"url": "https://bugzilla.suse.com/1218507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "important"
}
],
"title": "CVE-2024-0211"
},
{
"cve": "CVE-2024-2955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-2955"
}
],
"notes": [
{
"category": "general",
"text": "T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-2955",
"url": "https://www.suse.com/security/cve/CVE-2024-2955"
},
{
"category": "external",
"summary": "SUSE Bug 1222030 for CVE-2024-2955",
"url": "https://bugzilla.suse.com/1222030"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1.x86_64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.aarch64",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.ppc64le",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.s390x",
"openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-09-09T07:25:24Z",
"details": "important"
}
],
"title": "CVE-2024-2955"
}
]
}
CNVD-2024-39271
Vulnerability from cnvd - Published: 2024-09-25
VLAI Severity ?
Title
Wireshark拒绝服务漏洞（CNVD-2024-39271）
Description
Wireshark是一款非常流行的网络封包分析软件，可以截取各种网络数据包，并显示数据包详细信息。
Wireshark在4.2.0版本中存在拒绝服务漏洞。受影响版本的Wireshark中的HTTP3解析器崩溃允许通过数据包注入或精心制作的捕获文件拒绝服务。攻击者可利用该漏洞设计制作恶意文件从而发起攻击，对站点系统进行拒绝服务攻击。
Severity
高
Patch Name
Wireshark拒绝服务漏洞（CNVD-2024-39271）的补丁
Patch Description
Wireshark是一款非常流行的网络封包分析软件，可以截取各种网络数据包，并显示数据包详细信息。
Wireshark在4.2.0版本中存在拒绝服务漏洞。受影响版本的Wireshark中的HTTP3解析器崩溃允许通过数据包注入或精心制作的捕获文件拒绝服务。攻击者可利用该漏洞设计制作恶意文件从而发起攻击，对站点系统进行拒绝服务攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新: https://gitlab.com/wireshark/wireshark/-/issues/19502
Reference
https://nvd.nist.gov/vuln/detail/CVE-2024-0207
Impacted products
| Name | Wireshark Wireshark 4.2.0 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2024-0207",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-0207"
}
},
"description": "Wireshark\u662f\u4e00\u6b3e\u975e\u5e38\u6d41\u884c\u7684\u7f51\u7edc\u5c01\u5305\u5206\u6790\u8f6f\u4ef6\uff0c\u53ef\u4ee5\u622a\u53d6\u5404\u79cd\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u6570\u636e\u5305\u8be6\u7ec6\u4fe1\u606f\u3002\n\nWireshark\u57284.2.0\u7248\u672c\u4e2d\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u53d7\u5f71\u54cd\u7248\u672c\u7684Wireshark\u4e2d\u7684HTTP3\u89e3\u6790\u5668\u5d29\u6e83\u5141\u8bb8\u901a\u8fc7\u6570\u636e\u5305\u6ce8\u5165\u6216\u7cbe\u5fc3\u5236\u4f5c\u7684\u6355\u83b7\u6587\u4ef6\u62d2\u7edd\u670d\u52a1\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbe\u8ba1\u5236\u4f5c\u6076\u610f\u6587\u4ef6\u4ece\u800c\u53d1\u8d77\u653b\u51fb\uff0c\u5bf9\u7ad9\u70b9\u7cfb\u7edf\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0:\r\nhttps://gitlab.com/wireshark/wireshark/-/issues/19502",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2024-39271",
"openTime": "2024-09-25",
"patchDescription": "Wireshark\u662f\u4e00\u6b3e\u975e\u5e38\u6d41\u884c\u7684\u7f51\u7edc\u5c01\u5305\u5206\u6790\u8f6f\u4ef6\uff0c\u53ef\u4ee5\u622a\u53d6\u5404\u79cd\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u6570\u636e\u5305\u8be6\u7ec6\u4fe1\u606f\u3002\r\n\r\nWireshark\u57284.2.0\u7248\u672c\u4e2d\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u53d7\u5f71\u54cd\u7248\u672c\u7684Wireshark\u4e2d\u7684HTTP3\u89e3\u6790\u5668\u5d29\u6e83\u5141\u8bb8\u901a\u8fc7\u6570\u636e\u5305\u6ce8\u5165\u6216\u7cbe\u5fc3\u5236\u4f5c\u7684\u6355\u83b7\u6587\u4ef6\u62d2\u7edd\u670d\u52a1\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbe\u8ba1\u5236\u4f5c\u6076\u610f\u6587\u4ef6\u4ece\u800c\u53d1\u8d77\u653b\u51fb\uff0c\u5bf9\u7ad9\u70b9\u7cfb\u7edf\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Wireshark\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2024-39271\uff09\u7684\u8865\u4e01",
"products": {
"product": "Wireshark Wireshark 4.2.0"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-0207",
"serverity": "\u9ad8",
"submitTime": "2024-01-05",
"title": "Wireshark\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2024-39271\uff09"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…