Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-62288
HistoryMay 31, 2023 - 12:00 a.m.

Wireshark Denial of Service Vulnerability (CNVD-2023-62288)

2023-05-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wireshark
denial of service
vulnerability
network packet analysis
error messages
xra parser
packet injection

0.001 Low

EPSS

Percentile

32.7%

Wireshark (formerly known as Ethereal) is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited to cause an infinite loop in the XRA parser via packet injection of a carefully crafted capture file.