CVE-2023-2854

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

CVE-2023-2854: Out-of-bounds Write

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

CVE-2023-2857: Out-of-bounds Write

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

CVE-2023-2857

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

CVE-2023-2854

CVE-2023-2854 is a denial-of-service vulnerability in Wireshark caused by a crash in the BLF file parser when processing crafted capture files. Affected releases include Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13. Public references in multiple advisories note the issue as part of a broader set of Wir...

Wireshark 4.0.x < 4.0.6 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.6 advisory. - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet...

Wireshark 3.6.x < 3.6.14 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.14 advisory. - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packe...

Wireshark 4.0.x < 4.0.6 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.6 advisory. - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service vi...