Lucene search

K
kasperskyKaspersky LabKLA62771
HistoryNov 15, 2023 - 12:00 a.m.

KLA62771 DoS vulnerability in Wireshark

2023-11-1500:00:00
Kaspersky Lab
threats.kaspersky.com
15
wireshark
dos
vulnerability
update
cve-2023-6174
malicious users
detection date: 11/15/2023
severity: high
ssh dissector crash

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service.

Original advisories

Wireshark • wnpa-sec-2023-28 SSH dissector crash

Related products

Wireshark

CVE list

CVE-2023-6174 warning

Solution

Update to the latest version

Download Wireshark

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Wireshark 4.0.x earlier than 4.0.11

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%