PT-2023-21828 · Wireshark+6 · Wireshark+6

Huáscar

+1

·

Publicado

2023-05-17

·

Atualizado

2025-01-15

·

CVE-2023-2858

CVSS v3.1

5.3

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5
Description The issue allows for a denial of service via a crafted capture file, affecting the NetScaler file parser in Wireshark.
Recommendations For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2023:6469
ALSA-2023:7015
ALT-PU-2023-1938
ALT-PU-2023-1971
ALT-PU-2023-1976
ALT-PU-2023-5823
ALT-PU-2023-6556
CESA-2023_7015
CVE-2023-2858
DLA-3443-1
DLA-3906-1
DSA-5429-1
OESA-2023-1321
OESA-2023-1322
OPENSUSE-SU-2023_3252-1
OPENSUSE-SU-2024:12958-1
RHSA-2023:6469
RHSA-2023:7015
RHSA-2023_6469
RHSA-2023_7015
SUSE-SU-2023:2320-1
SUSE-SU-2023:3252-1

Produtos afetados

Alt Linux
Almalinux
Astra Linux
Centos
Red Hat
Suse
Wireshark