Lucene search

PRIOn knowledge basePRION:CVE-2023-0417

HistoryJan 26, 2023 - 9:18 p.m.

Input validation

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

input validation

memory leak

nfs dissector

wireshark

denial of service

packet injection

crafted capture file

nvd

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

CPENameOperatorVersion
wiresharkge3.6.0
wiresharkle3.6.10
wiresharkge4.0.0
wiresharkle4.0.2

Name	Operator	Version
wireshark	ge	3.6.0
wireshark	le	3.6.10
wireshark	ge	4.0.0
wireshark	le	4.0.2

References

gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json

gitlab.com/wireshark/wireshark/-/issues/18628

lists.debian.org/debian-lts-announce/2023/02/msg00007.html

www.wireshark.org/security/wnpa-sec-2023-02.html