PT-2023-5122 · Wireshark+4 · Wireshark+4

Simone Di Maria · Publicado 2023-08-24 · Atualizado 2024-09-30 · CVE-2023-4512

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.0.0 through 4.0.6

Description The issue is caused by an uncontrolled recursion in the traffic analyzer, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via packet injection or a crafted capture file.

Recommendations For Wireshark versions 4.0.0 through 4.0.6, update to a version that contains a fix for this issue to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Uncontrolled Recursion

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

ALT-PU-2023-5646

ALT-PU-2023-5647

ALT-PU-2023-5648

ALT-PU-2023-6556

BDU:2023-05713

CVE-2023-4512

DLA-3906-1

DSA-5559-1

MGASA-2023-0275

OPENSUSE-SU-2024:13184-1

ROSA-SA-2024-2390

SUSE-SU-2023:3778-1

Produtos afetados

Alt Linux

Astra Linux

Red Os

Suse

Wireshark

Referências · 42

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4512.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/19144 · Exploit
• https://bugs.mageia.org/show_bug.cgi?id=32275 · Nota
• https://abf.rosalinux.ru/advisories/ROSA-SA-2024-2390 · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.10 · Nota
• https://osv.dev/vulnerability/MGASA-2023-0275 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-4512 · Nota
• https://cve.org/CVERecord?id=CVE-2023-4512 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-4512 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:3778-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2023-0275.html · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2023-4512 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-4513 · Nota
• https://osv.dev/vulnerability/DLA-3906-1 · Aviso do Fabricante