CVE-2023-6174: Out-of-bounds Read in Wireshark
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID of this Wireshark vulnerability?
The vulnerability ID of this Wireshark vulnerability is CVE-2023-6174.
What is the title of this Wireshark vulnerability?
The title of this Wireshark vulnerability is 'Out-of-bounds Read in Wireshark'.
What is the description of this Wireshark vulnerability?
The description of this Wireshark vulnerability is 'SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file'.
What is the severity of CVE-2023-6174?
The severity of CVE-2023-6174 is medium with a severity value of 6.3.
Which software versions are affected by this Wireshark vulnerability?
Wireshark versions 2.6.20-0+deb10u4 to 2.6.20-0+deb10u7, 4.0.6-1~deb12u1, and 4.0.10-1 are affected by this vulnerability.
How can I fix CVE-2023-6174 in Wireshark?
To fix CVE-2023-6174 in Wireshark, update to version 3.4.10-0+deb11u1, 4.0.11-1~deb12u1, or 4.0.11-1 depending on your Debian distribution.
What is the Common Vulnerabilities and Exposures (CVE) reference for this Wireshark vulnerability?
The Common Vulnerabilities and Exposures (CVE) reference for this Wireshark vulnerability is CVE-2023-6174.
What is the CWE reference for this Wireshark vulnerability?
The CWE reference for this Wireshark vulnerability is CWE-125.