Memory leak in Wireshark - CVE-2023-5371

Vulnerability identifier: #VU81495

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-5371

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the RTPS dissector. A remote attacker can send specially crafted traffic to the system and perform a denial of service attack.

Wireshark
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
Desktop Applications Module
Basesystem Module
openSUSE Leap
openEuler
Anolis OS
Fedora
wireshark-devel
wireshark-debuginfo
wireshark-help
wireshark-debugsource
wireshark
libwsutil13
wireshark-ui-qt-debuginfo
wireshark-ui-qt
libwireshark15
libwireshark15-debuginfo
libwsutil13-debuginfo
libwiretap12-debuginfo
libwiretap12
wireshark-doc
wireshark-cli
net-analyzer/wireshark
libwiretap14
libwireshark17
libwsutil15-debuginfo
libwsutil15
libwireshark17-debuginfo
libwiretap14-debuginfo

Install update from vendor's website.

Wireshark - addressed in versions 3.6.17, 4.0.9
wireshark-devel - update to 3.6.14-4
wireshark-debuginfo - update to 3.6.14-4
wireshark-help - update to 3.6.14-4
wireshark-debugsource - update to 3.6.14-4
wireshark - update to 3.6.14-4
libwsutil13 - update to 3.6.17-150000.3.103.1
wireshark-devel - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
wireshark-ui-qt-debuginfo - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
wireshark-ui-qt - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
wireshark-debugsource - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
libwireshark15 - update to 3.6.17-150000.3.103.1
libwireshark15-debuginfo - update to 3.6.17-150000.3.103.1
libwsutil13-debuginfo - update to 3.6.17-150000.3.103.1
wireshark-debuginfo - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
libwiretap12-debuginfo - update to 3.6.17-150000.3.103.1
libwiretap12 - update to 3.6.17-150000.3.103.1
wireshark - addressed in versions 3.6.17-150000.3.103.1, 4.2.6-150600.18.6.1
wireshark - update to 4.0.8-2
wireshark-doc - update to 4.0.10-1
wireshark-devel - update to 4.0.10-1
wireshark-cli - update to 4.0.10-1
wireshark - update to 4.0.10-1
net-analyzer/wireshark - update to 4.0.11
wireshark - addressed in versions 4.0.12-1.fc38, 4.0.12-1.fc39
libwiretap14 - update to 4.2.6-150600.18.6.1
libwireshark17 - update to 4.2.6-150600.18.6.1
libwsutil15-debuginfo - update to 4.2.6-150600.18.6.1
libwsutil15 - update to 4.2.6-150600.18.6.1
libwireshark17-debuginfo - update to 4.2.6-150600.18.6.1
libwiretap14-debuginfo - update to 4.2.6-150600.18.6.1

• https://gitlab.com/wireshark/wireshark/-/issues/19322
• https://www.wireshark.org/security/wnpa-sec-2023-27.html

• Memory leak in Wireshark RTPS dissector
• SUSE update for wireshark
• Fedora 38 update for wireshark
• Fedora 39 update for wireshark
• Gentoo update for Wireshark
• openEuler update for wireshark
• SUSE update for wireshark
• Amazon Linux AMI update for wireshark
• Anolis OS update for wireshark