PT-2023-5122 · Wireshark+4 · Wireshark+4

Simone Di Maria · Published 2023-08-24 · Updated 2024-09-30 · CVE-2023-4512

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.0.0 through 4.0.6

Description The issue is caused by an uncontrolled recursion in the traffic analyzer, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via packet injection or a crafted capture file.

Recommendations For Wireshark versions 4.0.0 through 4.0.6, update to a version that contains a fix for this issue to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

ALT-PU-2023-5646

ALT-PU-2023-5647

ALT-PU-2023-5648

ALT-PU-2023-6556

BDU:2023-05713

CVE-2023-4512

DLA-3906-1

DSA-5559-1

MGASA-2023-0275

OPENSUSE-SU-2024:13184-1

ROSA-SA-2024-2390

SUSE-SU-2023:3778-1

Affected Products

Alt Linux

Astra Linux

Red Os

Suse

Wireshark

References · 42

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4512.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/19144 · Exploit
• https://osv.dev/vulnerability/MGASA-2023-0275 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4512 · Security Note
• https://ubuntu.com/security/CVE-2023-4512 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3778-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0275.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-4512 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3906-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4512 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4512 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4512 · Vendor Advisory