CVE-2023-1994
12.04.2023, 22:15
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture fileEnginsight
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 3.6.0 ≤ 𝑥 < 3.6.13 |
| wireshark | wireshark | 4.0.0 ≤ 𝑥 < 4.0.5 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-476 - NULL Pointer DereferenceA NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
References