KLA61757 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in iSCSI dissector can be exploited to cause denial of service.
2. Denial of service vulnerability in Kafka dissector can be exploited to cause denial of service.

Original advisories

Wireshark • wnpa-sec-2023-22 iSCSI dissector crash

Wireshark • wnpa-sec-2023-21 Kafka dissector crash

Related products

Wireshark

CVE list

CVE-2023-3649 high

CVE-2023-3648 high

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.6.x earlier than 3.6.16Wireshark 4.0.x earlier than 4.0.7