Lucene search

[email protected]NVD:CVE-2023-0416

HistoryJan 26, 2023 - 9:18 p.m.

CVE-2023-0416

2023-01-2621:18:08

CWE-404

[email protected]

web.nvd.nist.gov

gnw dissector

wireshark 4.0.0

wireshark 4.0.2

wireshark 3.6.0

wireshark 3.6.10

denial of service

packet injection

crafted capture file

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Affected configurations

NVD

Node

wiresharkwiresharkRange3.6.0–3.6.10

wiresharkwiresharkRange4.0.0–4.0.2

References

gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json

gitlab.com/wireshark/wireshark/-/issues/18779

www.wireshark.org/security/wnpa-sec-2023-04.html

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

Related for NVD:CVE-2023-0416

debiancve1 ubuntucve1 redhatcve1 osv1 cve1 alpinelinux1 veracode1 cvelist1 prion1 nessus9 kaspersky1 openvas2 photon1 rosalinux1