CVE-2023-0668
07.06.2023, 03:15
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 3.6.0 ≤ 𝑥 < 3.6.14 |
| wireshark | wireshark | 4.0.0 ≤ 𝑥 < 4.0.6 |
| debian | debian_linux | 12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libwireshark15 |
| ||||||||||||||||||||||||
| libwireshark17 |
| ||||||||||||||||||||||||
| libwiretap12 |
| ||||||||||||||||||||||||
| libwiretap14 |
| ||||||||||||||||||||||||
| libwsutil13 |
| ||||||||||||||||||||||||
| libwsutil15 |
| ||||||||||||||||||||||||
| wireshark |
| ||||||||||||||||||||||||
| wireshark-devel |
| ||||||||||||||||||||||||
| wireshark-ui-qt |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References