PT-2023-5116 · Wireshark+4 · Wireshark+4

Publicado

2023-07-14

·

Atualizado

2024-09-30

·

CVE-2023-3648

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.14 Wireshark versions 4.0.0 through 4.0.6
Description The issue is related to improper memory management in the traffic analyzer. It may allow an attacker to cause a denial of service. The problem can be triggered via packet injection or a crafted capture file, specifically affecting the Kafka dissector.
Recommendations For Wireshark versions 3.6.0 through 3.6.14, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.6, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of the Kafka dissector in Wireshark until a patch is available.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-762

Identificadores relacionados

ALT-PU-2023-5164
ALT-PU-2023-5823
ALT-PU-2023-6556
BDU:2023-05695
CVE-2023-3648
DLA-3906-1
DSA-5559-1
OESA-2023-1488
OPENSUSE-SU-2023_3252-1
OPENSUSE-SU-2024:13067-1
ROSA-SA-2024-2390
SUSE-SU-2023:3252-1

Produtos afetados

Alt Linux
Astra Linux
Red Os
Suse
Wireshark