PT-2023-5120 · Wireshark+4 · Wireshark+4
Chenyuan Mi
·
Publicado
2023-08-24
·
Atualizado
2024-09-30
·
CVE-2023-4511
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Wireshark versions 3.6.0 through 3.6.15
Wireshark versions 4.0.0 through 4.0.7
Description
The issue is related to the BT SDP dissector in Wireshark, which can enter an infinite loop. This can be exploited to cause a denial of service via packet injection or a crafted capture file. The exploitation of this issue may allow a remote attacker to cause a service disruption.
Recommendations
For Wireshark versions 3.6.0 through 3.6.15, update to a version outside of this range to resolve the issue.
For Wireshark versions 4.0.0 through 4.0.7, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider disabling the BT SDP dissector until a patch is available.
Exploit
Correção
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Red Os
Suse
Wireshark