CVE-2023-5371: Memory Allocation with Excessive Size Value in Wireshark
Published Oct 4, 2023
·Updated
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
Affected Software
2 affected components
Wireshark Wireshark>=3.6.0<3.6.17
Wireshark Wireshark>=4.0.0<4.0.9
Remediation
Information
Upgrade to version 4.0.9, 3.6.17 or above.
Event History
Oct 4, 2023
CVE Published
via MITRE·04:01 PM
Data Sourced
via MITRE·04:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Wireshark vulnerability?
CVE-2023-5371
2
What is the severity of CVE-2023-5371?
The severity of CVE-2023-5371 is medium.
3
What software versions are affected by CVE-2023-5371?
Wireshark versions between 4.0.0 and 4.0.8, and between 3.6.0 and 3.6.16 are affected by CVE-2023-5371.
4
How can CVE-2023-5371 be exploited?
CVE-2023-5371 can be exploited via packet injection or a crafted capture file.
5
Are there any fixes available for CVE-2023-5371?
Yes, Wireshark versions 4.0.9 and later, as well as versions 3.6.17 and later, address CVE-2023-5371.