Vulnerability-Lookup

RHSA-2023_6469

Vulnerability from csaf_redhat - Published: 2023-11-07 08:47 - Updated: 2024-11-22 23:40

Summary

Red Hat Security Advisory: wireshark security update

Severity

Moderate

Notes

Topic: An update for wireshark is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668) * wireshark: Candump log file parser crash (CVE-2023-2855) * wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856) * wireshark: NetScaler file parser crash (CVE-2023-2858) * wireshark: XRA dissector infinite loop (CVE-2023-2952) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-0666

A flaw was found in the RTPS dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 60 products

Product	Version	Remediation
Unresolved product id: AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-0668

A flaw was found in the IEEE C37.118 Synchrophasor dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 60 products, the same list as for CVE-2023-0666

Threats

Impact Moderate

CVE-2023-2855

A flaw was found in the Candump log file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 60 products, the same list as for CVE-2023-0666

Threats

Impact Moderate

CVE-2023-2856

A flaw was found in the VMS TCPIPtrace file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 60 products, the same list as for CVE-2023-0666

Threats

Impact Moderate

CVE-2023-2858

A flaw was found in the NetScaler file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 60 products, the same list as for CVE-2023-0666

Threats

Impact Moderate

CVE-2023-2952

A flaw was found in the XRA dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 60 products, the same list as for CVE-2023-0666

Threats

Impact Moderate

References

34 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:6469	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210822	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210824	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210829	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210832	external
https://bugzilla.redhat.com/show_bug.cgi?id=2210835	external
https://bugzilla.redhat.com/show_bug.cgi?id=2211406	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-0666	self
https://bugzilla.redhat.com/show_bug.cgi?id=2210832	external
https://www.cve.org/CVERecord?id=CVE-2023-0666	external
https://nvd.nist.gov/vuln/detail/CVE-2023-0666	external
https://access.redhat.com/security/cve/CVE-2023-0668	self
https://bugzilla.redhat.com/show_bug.cgi?id=2210835	external
https://www.cve.org/CVERecord?id=CVE-2023-0668	external
https://nvd.nist.gov/vuln/detail/CVE-2023-0668	external
https://access.redhat.com/security/cve/CVE-2023-2855	self
https://bugzilla.redhat.com/show_bug.cgi?id=2210822	external
https://www.cve.org/CVERecord?id=CVE-2023-2855	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2855	external
https://access.redhat.com/security/cve/CVE-2023-2856	self
https://bugzilla.redhat.com/show_bug.cgi?id=2210824	external
https://www.cve.org/CVERecord?id=CVE-2023-2856	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2856	external
https://access.redhat.com/security/cve/CVE-2023-2858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2210829	external
https://www.cve.org/CVERecord?id=CVE-2023-2858	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2858	external
https://access.redhat.com/security/cve/CVE-2023-2952	self
https://bugzilla.redhat.com/show_bug.cgi?id=2211406	external
https://www.cve.org/CVERecord?id=CVE-2023-2952	external
https://nvd.nist.gov/vuln/detail/CVE-2023-2952	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for wireshark is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.\n\nSecurity Fix(es):\n\n* wireshark: RTPS dissector crash (CVE-2023-0666)\n\n* wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668)\n\n* wireshark: Candump log file parser crash (CVE-2023-2855)\n\n* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)\n\n* wireshark: NetScaler file parser crash (CVE-2023-2858)\n\n* wireshark: XRA dissector infinite loop (CVE-2023-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:6469",
        "url": "https://access.redhat.com/errata/RHSA-2023:6469"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2210822",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210822"
      },
      {
        "category": "external",
        "summary": "2210824",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210824"
      },
      {
        "category": "external",
        "summary": "2210829",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210829"
      },
      {
        "category": "external",
        "summary": "2210832",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210832"
      },
      {
        "category": "external",
        "summary": "2210835",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210835"
      },
      {
        "category": "external",
        "summary": "2211406",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2211406"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6469.json"
      }
    ],
    "title": "Red Hat Security Advisory: wireshark security update",
    "tracking": {
      "current_release_date": "2024-11-22T23:40:53+00:00",
      "generator": {
        "date": "2024-11-22T23:40:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2023:6469",
      "initial_release_date": "2023-11-07T08:47:52+00:00",
      "revision_history": [
        {
          "date": "2023-11-07T08:47:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-11-07T08:47:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T23:40:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.3.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.3.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-1:3.4.10-6.el9.src",
                "product": {
                  "name": "wireshark-1:3.4.10-6.el9.src",
                  "product_id": "wireshark-1:3.4.10-6.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark@3.4.10-6.el9?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-cli-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-cli-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debugsource-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-debugsource-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-debugsource-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debugsource@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli-debuginfo@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debuginfo@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-1:3.4.10-6.el9.aarch64",
                "product": {
                  "name": "wireshark-devel-1:3.4.10-6.el9.aarch64",
                  "product_id": "wireshark-devel-1:3.4.10-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-devel@3.4.10-6.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-cli-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-cli-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debugsource@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli-debuginfo@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debuginfo@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-1:3.4.10-6.el9.ppc64le",
                "product": {
                  "name": "wireshark-devel-1:3.4.10-6.el9.ppc64le",
                  "product_id": "wireshark-devel-1:3.4.10-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-devel@3.4.10-6.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-cli-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-cli-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debugsource-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-debugsource-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-debugsource-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debugsource@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli-debuginfo@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debuginfo@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-1:3.4.10-6.el9.x86_64",
                "product": {
                  "name": "wireshark-devel-1:3.4.10-6.el9.x86_64",
                  "product_id": "wireshark-devel-1:3.4.10-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-devel@3.4.10-6.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-cli-1:3.4.10-6.el9.i686",
                "product": {
                  "name": "wireshark-cli-1:3.4.10-6.el9.i686",
                  "product_id": "wireshark-cli-1:3.4.10-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli@3.4.10-6.el9?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debugsource-1:3.4.10-6.el9.i686",
                "product": {
                  "name": "wireshark-debugsource-1:3.4.10-6.el9.i686",
                  "product_id": "wireshark-debugsource-1:3.4.10-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debugsource@3.4.10-6.el9?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
                "product": {
                  "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
                  "product_id": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli-debuginfo@3.4.10-6.el9?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debuginfo-1:3.4.10-6.el9.i686",
                "product": {
                  "name": "wireshark-debuginfo-1:3.4.10-6.el9.i686",
                  "product_id": "wireshark-debuginfo-1:3.4.10-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debuginfo@3.4.10-6.el9?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-1:3.4.10-6.el9.i686",
                "product": {
                  "name": "wireshark-devel-1:3.4.10-6.el9.i686",
                  "product_id": "wireshark-devel-1:3.4.10-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-devel@3.4.10-6.el9?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wireshark-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-cli-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-cli-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debugsource-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-debugsource-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-debugsource-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debugsource@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-cli-debuginfo@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-debuginfo-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-debuginfo-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-debuginfo-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-debuginfo@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wireshark-devel-1:3.4.10-6.el9.s390x",
                "product": {
                  "name": "wireshark-devel-1:3.4.10-6.el9.s390x",
                  "product_id": "wireshark-devel-1:3.4.10-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wireshark-devel@3.4.10-6.el9?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.src",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.src as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.src",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.i686 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-cli-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.i686 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.i686 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-debugsource-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-debugsource-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.aarch64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.i686 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.i686",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.ppc64le",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.s390x",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel-1:3.4.10-6.el9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        },
        "product_reference": "wireshark-devel-1:3.4.10-6.el9.x86_64",
        "relates_to_product_reference": "CRB-9.3.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-0666",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2023-05-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2210832"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the RTPS dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: RTPS dissector crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0666"
        },
        {
          "category": "external",
          "summary": "RHBZ#2210832",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210832"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0666",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0666"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0666",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0666"
        }
      ],
      "release_date": "2023-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: RTPS dissector crash"
    },
    {
      "cve": "CVE-2023-0668",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2023-05-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2210835"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the IEEE C37.118 Synchrophasor dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: IEEE C37.118 Synchrophasor dissector crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Wireshark as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability because the vulnerable code in the IEEE C37.118 Synchrophasor dissector was introduced in a newer Wireshark version.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0668"
        },
        {
          "category": "external",
          "summary": "RHBZ#2210835",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210835"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0668",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0668"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0668",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0668"
        }
      ],
      "release_date": "2023-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: IEEE C37.118 Synchrophasor dissector crash"
    },
    {
      "cve": "CVE-2023-2855",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2023-05-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2210822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Candump log file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: Candump log file parser crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Wireshark as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability because the Candump log file parser was introduced in a newer Wireshark version.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-2855"
        },
        {
          "category": "external",
          "summary": "RHBZ#2210822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-2855",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-2855"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2855",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2855"
        }
      ],
      "release_date": "2023-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: Candump log file parser crash"
    },
    {
      "cve": "CVE-2023-2856",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2023-05-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2210824"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the VMS TCPIPtrace file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: VMS TCPIPtrace file parser crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-2856"
        },
        {
          "category": "external",
          "summary": "RHBZ#2210824",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210824"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-2856",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-2856"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2856",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2856"
        }
      ],
      "release_date": "2023-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: VMS TCPIPtrace file parser crash"
    },
    {
      "cve": "CVE-2023-2858",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2023-05-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2210829"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the NetScaler file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: NetScaler file parser crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-2858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2210829",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2210829"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-2858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-2858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2858"
        }
      ],
      "release_date": "2023-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: NetScaler file parser crash"
    },
    {
      "cve": "CVE-2023-2952",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2023-05-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2211406"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the XRA dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: XRA dissector infinite loop",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
          "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
          "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-2952"
        },
        {
          "category": "external",
          "summary": "RHBZ#2211406",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2211406"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-2952",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-2952"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2952",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2952"
        }
      ],
      "release_date": "2023-05-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:47:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Wireshark must be restarted for the update to take effect.",
          "product_ids": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6469"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "AppStream-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "AppStream-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.src",
            "CRB-9.3.0.GA:wireshark-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-cli-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debuginfo-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-debugsource-1:3.4.10-6.el9.x86_64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.aarch64",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.i686",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.ppc64le",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.s390x",
            "CRB-9.3.0.GA:wireshark-devel-1:3.4.10-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wireshark: XRA dissector infinite loop"
    }
  ]
}

CVE-2023-0666 (GCVE-0-2023-0666)

Vulnerability from cvelistv5 – Published: 2023-06-07 02:25 – Updated: 2025-11-03 21:47

Title

Wireshark RTPS Parsing Buffer Overflow

Summary

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-07 15:03 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

AHA CNA under the mitre root

CNA scorecard C 73/100 over 14 records in the last 180 days details

References

7 references

URL	Tags
https://takeonme.org/cves/CVE-2023-0666.html	third-party-advisory
https://gitlab.com/wireshark/wireshark/-/issues/19085	issue-tracking
https://www.wireshark.org/docs/relnotes/wireshark…	release-notes
https://www.wireshark.org/security/wnpa-sec-2023-…	vendor-advisory
https://www.debian.org/security/2023/dsa-5429
https://security.gentoo.org/glsa/202309-02
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: 4.0.0 , ≤ 4.0.5 (semver) Unaffected: 4.0.6

Date Public

2023-05-22 19:04

Credits

Austin Hackers Anonymous! Austin Hackers Anonymous!

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:00.575Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://takeonme.org/cves/CVE-2023-0666.html"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19085"
          },
          {
            "tags": [
              "release-notes",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-18.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-0666",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-07T15:03:01.838531Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-07T15:03:06.503Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "lessThanOrEqual": "4.0.5",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.0.6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Austin Hackers Anonymous!"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Austin Hackers Anonymous!"
        }
      ],
      "datePublic": "2023-05-22T19:04:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark."
            }
          ],
          "value": "Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:20.490Z",
        "orgId": "26969f82-7e87-44d8-9cb5-f6fb926ddd43",
        "shortName": "AHA"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://takeonme.org/cves/CVE-2023-0666.html"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19085"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-18.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Wireshark RTPS Parsing Buffer Overflow",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "26969f82-7e87-44d8-9cb5-f6fb926ddd43",
    "assignerShortName": "AHA",
    "cveId": "CVE-2023-0666",
    "datePublished": "2023-06-07T02:25:27.974Z",
    "dateReserved": "2023-02-03T22:06:14.542Z",
    "dateUpdated": "2025-11-03T21:47:00.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-0668 (GCVE-0-2023-0668)

Vulnerability from cvelistv5 – Published: 2023-06-07 02:32 – Updated: 2025-11-03 21:47

Title

Wireshark IEEE-C37.118 parsing buffer overflow

Summary

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-07 14:58 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

AHA CNA under the mitre root

CNA scorecard C 73/100 over 14 records in the last 180 days details

References

7 references

URL	Tags
https://takeonme.org/cves/CVE-2023-0668.html	third-party-advisory
https://gitlab.com/wireshark/wireshark/-/issues/19087	issue-tracking
https://www.wireshark.org/docs/relnotes/wireshark…	release-notes
https://www.wireshark.org/security/wnpa-sec-2023-…	vendor-advisory
https://www.debian.org/security/2023/dsa-5429
https://security.gentoo.org/glsa/202309-02
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: 4.0.0 , ≤ 4.0.5 (semver) Unaffected: 4.0.6 Affected: 3.6.0 , ≤ 3.6.13 (semver) Unaffected: 3.6.14

Date Public

2023-05-22 19:04

Credits

zenofex WanderingGlitch Austin Hackers Anonymous!

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:03.617Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://takeonme.org/cves/CVE-2023-0668.html"
          },
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19087"
          },
          {
            "tags": [
              "release-notes",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-19.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-0668",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-07T14:58:27.192178Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-07T14:59:00.663Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "lessThanOrEqual": "4.0.5",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.0.6"
            },
            {
              "lessThanOrEqual": "3.6.13",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.6.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "zenofex"
        },
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "WanderingGlitch"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Austin Hackers Anonymous!"
        }
      ],
      "datePublic": "2023-05-22T19:04:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark."
            }
          ],
          "value": "Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:13.594Z",
        "orgId": "26969f82-7e87-44d8-9cb5-f6fb926ddd43",
        "shortName": "AHA"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://takeonme.org/cves/CVE-2023-0668.html"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19087"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-19.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Wireshark IEEE-C37.118 parsing buffer overflow",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "26969f82-7e87-44d8-9cb5-f6fb926ddd43",
    "assignerShortName": "AHA",
    "cveId": "CVE-2023-0668",
    "datePublished": "2023-06-07T02:32:45.095Z",
    "dateReserved": "2023-02-03T22:08:47.155Z",
    "dateUpdated": "2025-11-03T21:47:03.617Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-2855 (GCVE-0-2023-2855)

Vulnerability from cvelistv5 – Published: 2023-05-26 00:00 – Updated: 2025-11-03 21:47

Summary

Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-15 15:43 UTC

CWE

Buffer over-read in Wireshark
CWE-787 - Out-of-bounds Write

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 297 records in the last 180 days details

References

6 references

URL	Tags
https://www.wireshark.org/security/wnpa-sec-2023-…
https://gitlab.com/wireshark/wireshark/-/issues/19062
https://gitlab.com/gitlab-org/cves/-/blob/master/…
https://www.debian.org/security/2023/dsa-5429	vendor-advisory
https://security.gentoo.org/glsa/202309-02	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: >=4.0.0, <4.0.6 Affected: >=3.6.0, <3.6.14

Credits

Huascar Tejeda

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:39.041Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-12.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19062"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json"
          },
          {
            "name": "DSA-5429",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "name": "GLSA-202309-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2855",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T15:43:12.364309Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-15T15:43:18.413Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e=4.0.0, \u003c4.0.6"
            },
            {
              "status": "affected",
              "version": "\u003e=3.6.0, \u003c3.6.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Huascar Tejeda"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer over-read in Wireshark",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:34.910Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-12.html"
        },
        {
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19062"
        },
        {
          "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json"
        },
        {
          "name": "DSA-5429",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "name": "GLSA-202309-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2023-2855",
    "datePublished": "2023-05-26T00:00:00.000Z",
    "dateReserved": "2023-05-24T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:47:39.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-2856 (GCVE-0-2023-2856)

Vulnerability from cvelistv5 – Published: 2023-05-26 00:00 – Updated: 2025-11-03 21:47

Summary

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-15 15:42 UTC

CWE

Buffer over-read in Wireshark
CWE-787 - Out-of-bounds Write

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 297 records in the last 180 days details

References

7 references

URL	Tags
https://www.wireshark.org/security/wnpa-sec-2023-…
https://gitlab.com/wireshark/wireshark/-/issues/19083
https://gitlab.com/gitlab-org/cves/-/blob/master/…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://www.debian.org/security/2023/dsa-5429	vendor-advisory
https://security.gentoo.org/glsa/202309-02	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: >=4.0.0, <4.0.6 Affected: >=3.6.0, <3.6.14

Credits

Huascar Tejeda

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:40.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-16.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19083"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.json"
          },
          {
            "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
          },
          {
            "name": "DSA-5429",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "name": "GLSA-202309-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2856",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T15:42:30.539581Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-15T15:42:36.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e=4.0.0, \u003c4.0.6"
            },
            {
              "status": "affected",
              "version": "\u003e=3.6.0, \u003c3.6.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Huascar Tejeda"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer over-read in Wireshark",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:23.392Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-16.html"
        },
        {
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19083"
        },
        {
          "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.json"
        },
        {
          "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
        },
        {
          "name": "DSA-5429",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "name": "GLSA-202309-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2023-2856",
    "datePublished": "2023-05-26T00:00:00.000Z",
    "dateReserved": "2023-05-24T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:47:40.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-2858 (GCVE-0-2023-2858)

Vulnerability from cvelistv5 – Published: 2023-05-26 00:00 – Updated: 2025-11-03 21:47

Summary

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-15 15:39 UTC

CWE

Buffer over-read in Wireshark
CWE-787 - Out-of-bounds Write

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 297 records in the last 180 days details

References

7 references

URL	Tags
https://www.wireshark.org/security/wnpa-sec-2023-…
https://gitlab.com/wireshark/wireshark/-/issues/19081
https://gitlab.com/gitlab-org/cves/-/blob/master/…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://www.debian.org/security/2023/dsa-5429	vendor-advisory
https://security.gentoo.org/glsa/202309-02	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: >=4.0.0, <4.0.6 Affected: >=3.6.0, <3.6.14

Credits

Huascar Tejeda

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:41.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-15.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19081"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json"
          },
          {
            "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
          },
          {
            "name": "DSA-5429",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "name": "GLSA-202309-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T15:39:31.657577Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-15T15:39:36.275Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e=4.0.0, \u003c4.0.6"
            },
            {
              "status": "affected",
              "version": "\u003e=3.6.0, \u003c3.6.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Huascar Tejeda"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer over-read in Wireshark",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:18.422Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-15.html"
        },
        {
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19081"
        },
        {
          "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json"
        },
        {
          "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
        },
        {
          "name": "DSA-5429",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "name": "GLSA-202309-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2023-2858",
    "datePublished": "2023-05-26T00:00:00.000Z",
    "dateReserved": "2023-05-24T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:47:41.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-2952 (GCVE-0-2023-2952)

Vulnerability from cvelistv5 – Published: 2023-05-30 00:00 – Updated: 2025-11-03 21:47

Summary

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-13 19:59 UTC

CWE

Loop with unreachable exit condition ('infinite loop') in Wireshark
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

GitLab CNA under the mitre root

CNA scorecard B 75/100 over 297 records in the last 180 days details

References

7 references

URL	Tags
https://www.wireshark.org/security/wnpa-sec-2023-…
https://gitlab.com/wireshark/wireshark/-/issues/19100
https://gitlab.com/gitlab-org/cves/-/blob/master/…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://www.debian.org/security/2023/dsa-5429	vendor-advisory
https://security.gentoo.org/glsa/202309-02	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Wireshark Foundation	Wireshark	Affected: >=4.0.0, <4.0.6 Affected: >=3.6.0, <3.6.14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:56.615Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.wireshark.org/security/wnpa-sec-2023-20.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/wireshark/wireshark/-/issues/19100"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json"
          },
          {
            "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
          },
          {
            "name": "DSA-5429",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5429"
          },
          {
            "name": "GLSA-202309-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-02"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2952",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-13T19:59:47.786061Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-835",
                "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-13T20:00:08.791Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wireshark",
          "vendor": "Wireshark Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e=4.0.0, \u003c4.0.6"
            },
            {
              "status": "affected",
              "version": "\u003e=3.6.0, \u003c3.6.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Loop with unreachable exit condition (\u0027infinite loop\u0027) in Wireshark",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-17T06:06:16.682Z",
        "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
        "shortName": "GitLab"
      },
      "references": [
        {
          "url": "https://www.wireshark.org/security/wnpa-sec-2023-20.html"
        },
        {
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/19100"
        },
        {
          "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json"
        },
        {
          "name": "[debian-lts-announce] 20230603 [SECURITY] [DLA 3443-1] wireshark security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html"
        },
        {
          "name": "DSA-5429",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5429"
        },
        {
          "name": "GLSA-202309-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202309-02"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
    "assignerShortName": "GitLab",
    "cveId": "CVE-2023-2952",
    "datePublished": "2023-05-30T00:00:00.000Z",
    "dateReserved": "2023-05-29T00:00:00.000Z",
    "dateUpdated": "2025-11-03T21:47:56.615Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2023_6469

CVE-2023-0666 (GCVE-0-2023-0666)

CVE-2023-0668 (GCVE-0-2023-0668)

CVE-2023-2855 (GCVE-0-2023-2855)

CVE-2023-2856 (GCVE-0-2023-2856)

CVE-2023-2858 (GCVE-0-2023-2858)

CVE-2023-2952 (GCVE-0-2023-2952)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour