CVE-2023-2857

2023-05-2621:15:18

Debian Security Bug Tracker

security-tracker.debian.org

wireshark

blf file parser

denial of service

crafted capture file

unix

cve-2023-2857

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.4%

JSON

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

OSVersionArchitecturePackageVersionFilename
Debian12allwireshark< 4.0.6-1~deb12u1wireshark_4.0.6-1~deb12u1_all.deb
Debian11allwireshark< 3.4.10-0+deb11u1wireshark_3.4.10-0+deb11u1_all.deb
Debian999allwireshark< 4.0.6-1wireshark_4.0.6-1_all.deb
Debian13allwireshark< 4.0.6-1wireshark_4.0.6-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wireshark	< 4.0.6-1~deb12u1	wireshark_4.0.6-1~deb12u1_all.deb
Debian	11	all	wireshark	< 3.4.10-0+deb11u1	wireshark_3.4.10-0+deb11u1_all.deb
Debian	999	all	wireshark	< 4.0.6-1	wireshark_4.0.6-1_all.deb
Debian	13	all	wireshark	< 4.0.6-1	wireshark_4.0.6-1_all.deb