Medium: wireshark

Issue Overview: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2856 XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists in the Kafka dissector, which allows an attacker to cause an application crash through the packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. A crash in the GQUIC dissector may result in denial of service conditions, via a packet injection or a crafted capture file...

Wireshark iSCSI Parser Denial of Service Vulnerability

Wireshark is a set of network packet analysis software from the Wireshark Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in Wireshark versions 4.0.0 to 4.0.6, which stems from not proper...

Wireshark Denial of Service Vulnerability (CNVD-2023-62285)

Wireshark is a set of network packet analysis software from the Wireshark Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark has a denial of service vulnerability that stems from not properly handling incoming error...

SUSE CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3649

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

DEBIAN-CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

Design/Logic Flaw

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

Design/Logic Flaw

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

UBUNTU-CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3649

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

CVE-2023-3649 Buffer Over-read in Wireshark

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

CVE-2023-3649 Buffer Over-read in Wireshark

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

CVE-2023-3649

CVE-2023-3649 concerns the Wireshark iSCSI dissector crash in Wireshark 4.0.0–4.0.6, leading to denial of service via crafted captures or packets. The connected advisories confirm the issue and reference fixes in later Wireshark versions (examples include Debian LTS dla-3906 fixed in 3.4.16-0+deb...

CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648 Mismatched Memory Management Routines in Wireshark

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648

CVE-2023-3648 affects Wireshark’s Kafka dissector, with crashes and potential DoS when processing crafted packets or captures in Wireshark 4.0.0–4.0.6 and 3.6.0–3.6.14. The provided documents confirm the affected versions and the denial-of-service impact but do not specify a fixed, patched versio...

CVE-2023-3648 Mismatched Memory Management Routines in Wireshark

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...