wireshark-4.0.5

[Bruce Dubbs]

New point version.

[Douglas R. Reno]

Contains three security fixes

[Douglas R. Reno]

Bug Fixes

The following vulnerabilities have been fixed:

• wnpa-sec-2023-09[3] RPCoRDMA dissector crash. Issue 18852[4]. CVE-2023-1992[5].

• wnpa-sec-2023-10[6] LISP dissector large loop. Issue 18900[7]. CVE-2023-1993[8].

• wnpa-sec-2023-11[9] GQUIC dissector crash Issue 18947[10]. CVE-2023-1994[11].

The following bugs have been fixed:

• Wireshark ITS Dissector RTCMEM wrong protocol version selector 2
  • should use 1. Issue 18862[12].

• Wireshark treats the letter E in SSRC as an exponential representation of a number. Issue 18879[13].

• VNC RRE Parser skips over data. Issue 18883[14].

• sshdump coredump when --remote-interface is left empty. Issue 18904[15].

• Fuzz job crash output: fuzz-2023-03-17-7298.pcap. Issue 18917[16].

• Fuzz job crash output: fuzz-2023-03-27-7564.pcap. Issue 18934[17].

• RFC8925 support (dhcp option 108) Issue 18943[18].

• DIS dissector shows an incorrect state in the packet list info column. Issue 18967[19].

• RTP analysis shows incorrect timestamp error when timestamp is rolled over. Issue 18973[20].

• Asterisk (*) key crash on Endpoint/Conversation dialog. Issue 18975[21].

• The RTP player waveform now synchronizes better with audio.

[Douglas R. Reno]

Fixed at 746cbd8040439248e6b9702053f46d60095634c4

SA-11.3-021 issued

[Bruce Dubbs]

Milestone renamed