PT-2023-16791 · Wireshark+3 · Wireshark+3

Published 2023-03-06 · Updated 2025-09-29 · CVE-2023-1161

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.11 Wireshark versions 4.0.0 through 4.0.3

Description The issue affects the ISO 15765 and ISO 10681 dissector in Wireshark, allowing denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.6.0 through 3.6.11, update to a version outside of this range to resolve the issue. For Wireshark versions 4.0.0 through 4.0.3, update to a version outside of this range to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-1747

ALT-PU-2023-1771

ALT-PU-2023-5823

ALT-PU-2023-6556

CVE-2023-1161

DLA-3402-1

DLA-3906-1

DSA-5429-1

OESA-2023-1189

OESA-2023-1190

OPENSUSE-SU-2024:12785-1

ROSA-SA-2023-2257

ROSA-SA-2024-2388

SUSE-SU-2023:1762-1

SUSE-SU-2023_1762-1

Affected Products

Alt Linux

Astra Linux

Suse

Wireshark

References · 30

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1161.json · Exploit
• https://wireshark.org/security/wnpa-sec-2023-08.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12785-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-1161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1161 · Security Note
• https://gitlab.com/wireshark/wireshark/-/issues/18839 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1762-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-1161 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1161 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5429-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3906-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1189 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1190 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1161 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3402-1 · Vendor Advisory