{
  "fix": "ALAS2023-2023-038",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2023-038",
  "summary": "ALAS2023-2023-038, released February 17, 2023, fixes 22 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 4 packages",
  "released": "2023-02-17T20:44:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2022-0582, rated Critical",
  "supported": true,
  "cveCount": 22,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.08139,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2023-038.html",
  "appliesTo": [
    {
      "product": "wireshark-cli",
      "productUrl": "https://patchblox.com/security/product/linux/wireshark-cli",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.2-1.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "wireshark-cli-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/wireshark-cli-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.2-1.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "wireshark-debugsource",
      "productUrl": "https://patchblox.com/security/product/linux/wireshark-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.2-1.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "wireshark-devel",
      "productUrl": "https://patchblox.com/security/product/linux/wireshark-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.2-1.amzn2023.0.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-0582",
      "url": "https://patchblox.com/security/cve/CVE-2022-0582",
      "title": "wireshark: Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of ser...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.01992,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39925",
      "url": "https://patchblox.com/security/cve/CVE-2021-39925",
      "title": "wireshark: Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of servi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.08139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39926",
      "url": "https://patchblox.com/security/cve/CVE-2021-39926",
      "title": "wireshark: Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet in...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.07957,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39928",
      "url": "https://patchblox.com/security/cve/CVE-2021-39928",
      "title": "wireshark: NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39922",
      "url": "https://patchblox.com/security/cve/CVE-2021-39922",
      "title": "wireshark: Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.05563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39924",
      "url": "https://patchblox.com/security/cve/CVE-2021-39924",
      "title": "wireshark: Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service vi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.05294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4181",
      "url": "https://patchblox.com/security/cve/CVE-2021-4181",
      "title": "wireshark: wireshark - security update",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.04056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4184",
      "url": "https://patchblox.com/security/cve/CVE-2021-4184",
      "title": "wireshark: Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via pac...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.04056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4185",
      "url": "https://patchblox.com/security/cve/CVE-2021-4185",
      "title": "wireshark: Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injec...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.04056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39929",
      "url": "https://patchblox.com/security/cve/CVE-2021-39929",
      "title": "wireshark: Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial o...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0381,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4182",
      "url": "https://patchblox.com/security/cve/CVE-2021-4182",
      "title": "wireshark: Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.03447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39921",
      "url": "https://patchblox.com/security/cve/CVE-2021-39921",
      "title": "wireshark: NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of servi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.03373,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4190",
      "url": "https://patchblox.com/security/cve/CVE-2021-4190",
      "title": "wireshark: Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.03332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39920",
      "url": "https://patchblox.com/security/cve/CVE-2021-39920",
      "title": "wireshark: NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet inject...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.03289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-4186",
      "url": "https://patchblox.com/security/cve/CVE-2021-4186",
      "title": "wireshark: Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.02306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-0586",
      "url": "https://patchblox.com/security/cve/CVE-2022-0586",
      "title": "wireshark: Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service vi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.02003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-0581",
      "url": "https://patchblox.com/security/cve/CVE-2022-0581",
      "title": "wireshark: Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via pack...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.01789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-0583",
      "url": "https://patchblox.com/security/cve/CVE-2022-0583",
      "title": "wireshark: Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via pac...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.01789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-39923",
      "url": "https://patchblox.com/security/cve/CVE-2021-39923",
      "title": "wireshark: Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3725",
      "url": "https://patchblox.com/security/cve/CVE-2022-3725",
      "title": "wireshark: Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or cra...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.01072,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-0585",
      "url": "https://patchblox.com/security/cve/CVE-2022-0585",
      "title": "wireshark: Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service v...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.02391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3190",
      "url": "https://patchblox.com/security/cve/CVE-2022-3190",
      "title": "wireshark: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a comput...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.02296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}