PT-2023-22298 · Wireshark+6 · Wireshark+6

Publicado 2023-05-23 · Atualizado 2025-09-29 · CVE-2023-2952

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5

Description The issue allows for denial of service via packet injection or crafted capture file. It is related to an infinite loop in the XRA dissector.

Recommendations For Wireshark versions 3.6.0 through 3.6.13, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.5, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the XRA dissector to prevent exploitation until a patch is available.

Exploit

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALSA-2023:6469

ALSA-2023:7015

ALSA-2023_6469

ALSA-2023_7015

ALSA-2025_16880

ALT-PU-2023-1938

ALT-PU-2023-1971

ALT-PU-2023-1976

ALT-PU-2023-5823

ALT-PU-2023-6556

CESA-2023_7015

CVE-2023-2952

DLA-3443-1

DLA-3906-1

DSA-5429-1

OESA-2023-1373

OESA-2023-1374

OPENSUSE-SU-2023_3252-1

OPENSUSE-SU-2024:12989-1

RHSA-2023:6469

RHSA-2023:7015

RHSA-2023_6469

RHSA-2023_7015

ROSA-SA-2024-2390

SUSE-SU-2023:3252-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Red Hat

Suse

Wireshark

Referências · 66

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2952.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/19100 · Exploit
• https://suse.com/security/cve/CVE-2023-2879 · Nota
• https://osv.dev/vulnerability/ALSA-2023:6469 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-2952 · Nota
• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json · Nota
• https://suse.com/security/cve/CVE-2023-0668 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20233252-1 · Nota
• https://t.me/cvenotify/51912 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2952 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-2952 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-2856 · Nota
• https://ubuntu.com/security/CVE-2023-2952 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:12989-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:3252-1 · Aviso do Fabricante