PT-2023-21797 · Wireshark+4 · Wireshark+4

Huáscar

+1

·

Publicado

2023-05-26

·

Atualizado

2025-01-15

·

CVE-2023-2855

CVSS v3.1

5.3

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5
Description The issue allows for denial of service via a crafted capture file, causing a crash in the candump log parser.
Recommendations For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2023:6469
ALT-PU-2023-1938
ALT-PU-2023-1971
ALT-PU-2023-1976
ALT-PU-2023-5823
ALT-PU-2023-6556
CVE-2023-2855
DLA-3906-1
DSA-5429-1
OESA-2023-1321
OESA-2023-1322
OPENSUSE-SU-2023_3252-1
OPENSUSE-SU-2024:12958-1
RHSA-2023:6469
RHSA-2023_6469
ROSA-SA-2024-2388
SUSE-SU-2023:2320-1
SUSE-SU-2023:3252-1

Produtos afetados

Alt Linux
Almalinux
Red Hat
Suse
Wireshark