TI-2023-02768 CVE-2023-2952 · GHSA-h2fj-p2f3-rmwc
Infinite loop in Wireshark
Priority MEDIUM 62
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
RHSA-2023:6469
wireshark security update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) wireshark-devel-1:3.4.10-6.el9
- Red Hat Enterprise Linux AppStream (v. 9) wireshark-1:3.4.10-6.el9, wireshark-cli-1:3.4.10-6.el9
Fixes 6 records
TI-2023-02676 CVE-2023-2856 · GHSA-c9g4-j4fr-ggh2
Out-of-bounds write in Wireshark
Priority MEDIUM 62
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
TI-2023-02675 CVE-2023-2855 · GHSA-ff83-59jh-6r49
Out-of-bounds write in Wireshark
Priority MEDIUM 62
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
TI-2023-00633 CVE-2023-0668 · GHSA-4794-8fm9-wmp3
Wireshark IEEE-C37.118 parsing buffer overflow
Priority MEDIUM 62
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in t…
TI-2023-00631 CVE-2023-0666 · GHSA-p3q5-qxhp-fpcg
Wireshark RTPS Parsing Buffer Overflow
Priority MEDIUM 62
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the conte…
TI-2023-02678 CVE-2023-2858 · GHSA-wcmq-57jj-6qwc
Out-of-bounds write in Wireshark
Priority LOW 32
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file