Advisories » MGASA-2021-0364

Updated wireshark packages fix a security vulnerability

Publication date: 21 Jul 2021
Modification date: 21 Jul 2021
Type: security
Affected Mageia releases : 8
CVE: CVE-2021-22235

Description

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows
denial of service via packet injection or crafted capture file
(CVE-2021-22235).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=29261
• https://www.wireshark.org/security/wnpa-sec-2021-06
• https://www.wireshark.org/docs/relnotes/wireshark-3.4.7.html
• https://www.wireshark.org/news/20210714.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22235

SRPMS

8/core

• wireshark-3.4.7-1.mga8