PT-2023-16255 · Wireshark+3 · Wireshark+3

Publicado

2023-01-23

·

Atualizado

2025-03-31

·

CVE-2023-0417

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.10 Wireshark versions 4.0.0 through 4.0.2
Description A memory leak in the NFS dissector allows denial of service via packet injection or crafted capture file.
Recommendations For Wireshark versions 3.6.0 through 3.6.10, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.2, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

Improper Resource Release

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

ALT-PU-2023-1113
ALT-PU-2023-1160
ALT-PU-2023-5823
ALT-PU-2023-6556
CVE-2023-0417
DLA-3313-1
DLA-3906-1
OESA-2023-1094
OESA-2023-1115
OPENSUSE-SU-2023_0343-1
OPENSUSE-SU-2024:12647-1
ROSA-SA-2023-2257
SUSE-SU-2023:0343-1

Produtos afetados

Alt Linux
Astra Linux
Suse
Wireshark