ZDI-CAN-22164: ZDI-24-355: Wireshark NetScreen File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability in that the target must open a specially crafted packet capture file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-6175.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22164?
The vulnerability ZDI-CAN-22164 carries a CVSS rating of 7.8, indicating high severity.
How do I fix ZDI-CAN-22164?
To resolve ZDI-CAN-22164, update to the latest version of Wireshark that addresses this vulnerability.
What type of vulnerability is ZDI-CAN-22164?
ZDI-CAN-22164 is a remote code execution vulnerability that requires user interaction for exploitation.
What affects ZDI-CAN-22164?
The vulnerability ZDI-CAN-22164 affects installations of Wireshark software.
What user action is required to exploit ZDI-CAN-22164?
Exploitation of ZDI-CAN-22164 requires the user to open a specially crafted packet capture file.