DeutschShown in its original language — a full translation is planned for a future version.
Wireshark: Mehrere Schwachstellen
view advisory published 2023-05-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code auszuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0668US | medium6.5 | — | ||
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer ov… | ||||
| CVE-2023-0667US | medium6.5 | — | ||
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based… | ||||
| CVE-2023-0666US | medium6.5 | — | ||
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow,… | ||||
| CVE-2023-2952US | medium6.5 | — | ||
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||||
| CVE-2023-2879US | high7.5 | — | ||
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file | ||||
| CVE-2023-2858US | medium6.5 | — | ||
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||||
| CVE-2023-2857US | medium6.5 | — | ||
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||||
| CVE-2023-2856US | medium6.5 | — | ||
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||||
| CVE-2023-2855US | medium6.5 | — | ||
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||||
| CVE-2023-2854US | medium6.5 | — | ||
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:6469 vom 2023-11-07external
- Red Hat Security Advisory RHSA-2023:7015 vom 2023-11-15external
- Amazon Linux Security Advisory ALAS-2023-2113 vom 2023-07-20external
- Amazon Linux Security Advisory ALAS-2023-2187 vom 2023-08-09external
- Github Advisory vom 2023-05-24external
- PoCvom 2023-05-24external
- Debian Security Advisory DLA-3443 vom 2023-06-03external
- Debian Security Advisory DLA-3906 vom 2024-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan