Low: wireshark

Issue Overview:

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. (CVE-2023-0667)

Affected Packages:

wireshark

Issue Correction:
Run yum update wireshark to update your system.

New Packages:

i686:  
    wireshark-devel-1.8.10-25.24.amzn1.i686  
    wireshark-debuginfo-1.8.10-25.24.amzn1.i686  
    wireshark-1.8.10-25.24.amzn1.i686  
  
src:  
    wireshark-1.8.10-25.24.amzn1.src  
  
x86_64:  
    wireshark-devel-1.8.10-25.24.amzn1.x86_64  
    wireshark-debuginfo-1.8.10-25.24.amzn1.x86_64  
    wireshark-1.8.10-25.24.amzn1.x86_64  

Additional References

Red Hat: CVE-2023-0667

Mitre: CVE-2023-0667