Lucene search
+L

1327 matches found

RedhatCVE
RedhatCVE
•added 2023/08/30 6:45 a.m.•37 views

CVE-2023-4511

A denial of service vulnerability was found in Wireshark due to an infinite loop in the Bluetooth BT SDP dissector. Exploiting this flaw involves injecting a malformed packet onto the wire or enticing a victim to read a corrupted packet trace file, resulting in a crash of the BT SDP dissector. Th...

6.5CVSS7.2AI score0.00463EPSS
SaveExploits0References5
CNVD
CNVD
•added 2023/08/28 12:00 a.m.•36 views

Wireshark Denial of Service Vulnerability (CNVD-2023-72254)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

5CVSS7AI score0.00463EPSS
SaveExploits0Affected Software2
SUSE CVE
SUSE CVE
•added 2023/08/26 8:07 a.m.•7 views

SUSE CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.9AI score0.00514EPSS
SaveExploits1References4
OSV
OSV
•added 2023/08/24 7:15 a.m.•6 views

DEBIAN-CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.3AI score0.00514EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2023/08/24 7:15 a.m.•54 views

CVE-2023-4511

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.3AI score0.00463EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/08/24 7:15 a.m.•37 views

CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.2AI score0.00514EPSS
SaveExploits1
Prion
Prion
•added 2023/08/24 7:15 a.m.•42 views

Design/Logic Flaw

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00463EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2023/08/24 7:15 a.m.•44 views

Input validation

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5CVSS7.2AI score0.00514EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2023/08/24 7:15 a.m.•10 views

UBUNTU-CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00514EPSS
SaveExploits1References4
CVE
CVE
•added 2023/08/24 6:30 a.m.•201 views

CVE-2023-4513

CVE-2023-4513: In Wireshark, the BT SDP dissector has a memory leak that can cause DoS when processing crafted captures or injected packets (affecting 4.0.0–4.0.7 and 3.6.0–3.6.15). Multiple distributions have released fixes (e.g., Wireshark 4.0.8+ in some repos; Debian LTS patched 3.4.16; Mageia...

7.5CVSS6.3AI score0.00514EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2023/08/24 6:30 a.m.•38 views

CVE-2023-4511 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.3AI score
SaveExploits0References9
CNNVD
CNNVD
•added 2023/08/24 12:00 a.m.•8 views

Wireshark 安全漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 4.0.0 through 4.0.7 and 3.6.0 through...

7.5CVSS7.2AI score0.00514EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•2 views

CVE-2023-4513: Missing Release of Memory after Effective Lifetime

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00514EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/24 12:00 a.m.•11 views

Wireshark 安全漏洞

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

7.5CVSS7AI score0.00463EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/08/24 12:00 a.m.•30 views

CVE-2023-4513

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.8AI score0.00514EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•1 views

CVE-2023-4511: Loop with Unreachable Exit Condition

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.7AI score0.00463EPSS
SaveExploits0References3
OSV
OSV
•added 2023/08/14 10:15 p.m.•17 views

CVE-2023-21273

In SDPAddAttribute of sdpdb.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS6.2AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/08/14 12:00 a.m.•14 views

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that originates from an incorrect boundary check in the SDPAddAttribute module of sdpdb.cc, which can be exploited by an attacker to run arbitrary code on the syste...

8.8CVSS7.8AI score0.00176EPSS
SaveExploits0References3
OSV
OSV
•added 2023/08/11 3:15 a.m.•13 views

CVE-2023-31246

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/11 3:15 a.m.•24 views

CVE-2023-31246

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00137EPSS
SaveExploits0References1
Rows per page
Query Builder