CVE-2023-0411
First published: Tue Jan 24 2023(Updated: )
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=3.6.0<=3.6.10 | |
| Wireshark Wireshark | >=4.0.0<=4.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json
- https://gitlab.com/wireshark/wireshark/-/issues/18711
- https://gitlab.com/wireshark/wireshark/-/issues/18720
- https://gitlab.com/wireshark/wireshark/-/issues/18737
- https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
- https://www.wireshark.org/security/wnpa-sec-2023-06.html
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-0411.
What is the severity of CVE-2023-0411?
The severity of CVE-2023-0411 is medium with a severity value of 6.5.
What software versions are affected by CVE-2023-0411?
Wireshark versions 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 are affected by CVE-2023-0411.
How can an attacker exploit CVE-2023-0411?
An attacker can exploit CVE-2023-0411 by performing denial of service through packet injection or using a crafted capture file.
Are there any references for CVE-2023-0411?
Yes, you can find references for CVE-2023-0411 at the following links: [link1](https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json), [link2](https://gitlab.com/wireshark/wireshark/-/issues/18711), [link3](https://gitlab.com/wireshark/wireshark/-/issues/18720).
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/3.6.0
- version/wireshark wireshark/3.6.10
- version/wireshark wireshark/4.0.0
- version/wireshark wireshark/4.0.2