PT-2023-5117 · Wireshark+4 · Wireshark+4

Published 2023-07-14 · Updated 2024-09-30 · CVE-2023-3649

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.0.0 through 4.0.6

Description The issue is related to a buffer overflow in memory, which can be exploited to cause a denial of service. This can occur through packet injection or by using a crafted capture file, potentially allowing an attacker to disrupt service.

Recommendations For Wireshark versions 4.0.0 through 4.0.6, update to a version that contains a fix for this issue to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

ALT-PU-2023-5164

ALT-PU-2023-6556

BDU:2023-05696

CVE-2023-3649

DLA-3906-1

DSA-5559-1

OESA-2023-1652

OPENSUSE-SU-2024:13067-1

OPENSUSE-SU-2024_3165-1

ROSA-SA-2024-2390

SUSE-SU-2024:3165-1

Affected Products

Alt Linux

Astra Linux

Red Os

Suse

Wireshark

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3649.json · Exploit
• https://osv.dev/vulnerability/OESA-2023-1652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4511 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3649 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3906-1 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2023-22.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3649 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13067-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3165-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4513 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-3649 · Security Note
• https://gitlab.com/wireshark/wireshark/-/issues/19164 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-3649 · Security Note
• https://bdu.fstec.ru/vul/2023-05696 · Security Note