CVE-2023-0415: Null Pointer Dereference
First published: Tue Jan 24 2023(Updated: )
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=3.6.0<=3.6.10 | |
| Wireshark Wireshark | >=4.0.0<=4.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this iSCSI dissector crash?
The vulnerability ID of this iSCSI dissector crash is CVE-2023-0415.
In which versions of Wireshark does this vulnerability exist?
This vulnerability exists in Wireshark versions 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10.
What is the impact of this vulnerability?
This vulnerability allows denial of service via packet injection or crafted capture file.
How can this vulnerability be exploited?
This vulnerability can be exploited by injecting malicious packets or using a crafted capture file.
Are there any fixes available for this vulnerability?
Yes, fixes for this vulnerability are available. Please refer to the references for more information.
- collector/nvd-index
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/3.6.0
- version/wireshark wireshark/3.6.10
- version/wireshark wireshark/4.0.0
- version/wireshark wireshark/4.0.2