Lucene search

K
kasperskyKaspersky LabKLA61754
HistoryMar 02, 2023 - 12:00 a.m.

KLA61754 DoS vulnerability in Wireshark

2023-03-0200:00:00
Kaspersky Lab
threats.kaspersky.com
10
wireshark
dos
vulnerability
exploitation

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service.

Original advisories

Wireshark • wnpa-sec-2023-08 ISO 15765 and ISO 10681 dissector crash

Related products

Wireshark

CVE list

CVE-2023-1161 high

Solution

Update to the latest version

Download Wireshark

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Wireshark 3.6.x earlier than 3.6.12Wireshark 4.0.x earlier than 4.0.4

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%