PT-2023-21965 · Wireshark+3 · Wireshark+3

CVE-2023-2879

·

Publicado

2023-05-26

·

Atualizado

2025-09-29

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5
Description The issue allows for denial of service through packet injection or a crafted capture file, caused by an infinite loop in the GDSDB.
Recommendations For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2023-1938
ALT-PU-2023-1971
ALT-PU-2023-1976
ALT-PU-2023-5823
ALT-PU-2023-6556
CVE-2023-2879
DLA-3443-1
DLA-3906-1
DSA-5429-1
OESA-2023-1321
OESA-2023-1322
OPENSUSE-SU-2023_3252-1
OPENSUSE-SU-2024:12989-1
ROSA-SA-2024-2390
SUSE-SU-2023:3252-1

Produtos afetados

Alt Linux
Astra Linux
Suse
Wireshark