CVE-2023-1161: Buffer Overflow
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1161?
The severity of CVE-2023-1161 is high with a severity value of 7.1.
How does CVE-2023-1161 affect Wireshark?
CVE-2023-1161 affects Wireshark versions 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11, causing a crash in the ISO 15765 and ISO 10681 dissector.
How can CVE-2023-1161 be exploited?
CVE-2023-1161 can be exploited through packet injection or a crafted capture file, leading to a denial of service.
What is the recommended remedy for CVE-2023-1161 on Debian systems?
For Debian systems, the recommended remedy for CVE-2023-1161 is to update the 'wireshark' package to version 4.0.8-1 or later.
Are there any references for CVE-2023-1161?
Yes, you can find references for CVE-2023-1161 at the following links: [Link1](https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json), [Link2](https://gitlab.com/wireshark/wireshark/-/issues/18839), [Link3](https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html)