Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-0667HistoryJun 07, 2023 - 3:15 a.m.
CVE-2023-0667
2023-06-0703:15:09
Debian Security Bug Tracker
security-tracker.debian.org
17
wireshark
buffer overflow
msmms
code execution
validation failure
unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
57.1%
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wireshark | < 4.0.6-1~deb12u1 | wireshark_4.0.6-1~deb12u1_all.deb |
| Debian | 11 | all | wireshark | <= 3.4.10-0+deb11u1 | wireshark_3.4.10-0+deb11u1_all.deb |
| Debian | 999 | all | wireshark | < 4.0.6-1 | wireshark_4.0.6-1_all.deb |
| Debian | 13 | all | wireshark | < 4.0.6-1 | wireshark_4.0.6-1_all.deb |
Related
cvelist
cvelist
CVE-2023-0667 Wireshark MSMMS parsing buffer overflow
2023-06-07 02:38:07
nessus
nessus
Amazon Linux AMI : wireshark (ALAS-2023-1785)
2023-07-20 00:00:00
Amazon Linux 2 : wireshark (ALAS-2023-2113)
2023-07-20 00:00:00
cnvd
cnvd
Wireshark Buffer Overflow Vulnerability (CNVD-2023-62286)
2023-06-08 00:00:00
amazon
amazon
Low: wireshark
2023-07-13 23:57:00
Low: wireshark
2023-07-05 22:01:00
cbl_mariner
cbl_mariner
CVE-2023-0667 affecting package wireshark for versions less than 4.0.8-1
2023-09-28 11:57:58
veracode
veracode
Heap-based Buffer Overflow
2023-08-06 23:22:39
ubuntucve
ubuntucve
CVE-2023-0667
2023-06-07 00:00:00
cve
cve
CVE-2023-0667
2023-06-07 03:15:09
nvd
nvd
CVE-2023-0667
2023-06-07 03:15:09
prion
prion
Heap overflow
2023-06-07 03:15:00
osv
osv
CVE-2023-0667
2023-06-07 03:15:09
wireshark - security update
2023-06-15 00:00:00
redhatcve
redhatcve
CVE-2023-0667
2023-08-07 11:48:53
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0620
2023-07-28 00:00:00
openvas
openvas
openSUSE: Security Advisory for wireshark (SUSE-SU-2023:3252-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5429-1)
2023-06-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2388
2024-04-02 07:22:04
gentoo
gentoo
Wireshark: Multiple Vulnerabilities
2023-09-17 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
57.1%
Related for DEBIANCVE:CVE-2023-0667