Lucene search

K
redosRedosROS-20230620-04
HistoryJun 20, 2023 - 12:00 a.m.

ROS-20230620-04

2023-06-2000:00:00
redos.red-soft.ru
11
wireshark
traffic analysis
lisp dissector
rpcordma dissector
resource consumption
remote attackers
denial-of-service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.6%

The vulnerability of the traffic analysis program Wireshark is related to the failure to properly control the
consumption of internal resources in the LISP dissector. Exploitation of the vulnerability could allow an attacker,
acting remotely, to cause resource exhaustion and perform a denial-of-service attack.

A vulnerability in the traffic analysis software Wireshark is related to a failure of the RPCoRDMA dissector. Exploitation
exploitation of this vulnerability could allow an attacker to perform a denial-of-service attack.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64wireshark<= 3.6.0-3UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.6%