CVE-2023-0415

2023-01-2621:18:08

Debian Security Bug Tracker

security-tracker.debian.org

iscsi

wireshark

denial of service

packet injection

crafted capture file

unix

cve-2023-0415

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.4%

JSON

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

OSVersionArchitecturePackageVersionFilename
Debian12allwireshark< 4.0.3-1wireshark_4.0.3-1_all.deb
Debian11allwireshark<= 3.4.10-0+deb11u1wireshark_3.4.10-0+deb11u1_all.deb
Debian999allwireshark< 4.0.3-1wireshark_4.0.3-1_all.deb
Debian13allwireshark< 4.0.3-1wireshark_4.0.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wireshark	< 4.0.3-1	wireshark_4.0.3-1_all.deb
Debian	11	all	wireshark	<= 3.4.10-0+deb11u1	wireshark_3.4.10-0+deb11u1_all.deb
Debian	999	all	wireshark	< 4.0.3-1	wireshark_4.0.3-1_all.deb
Debian	13	all	wireshark	< 4.0.3-1	wireshark_4.0.3-1_all.deb