Lucene search
K

12 matches found

Veracode
Veracode
added 2023/08/07 12:56 a.m.19 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS attacks. Infinite loop in GDSDB allows a remote attacker to cause denial of service conditions via packet injection or crafted capture file...

7.5CVSS7AI score0.00113EPSS
Exploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/06/08 12:0 a.m.52 views

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-197)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-197 advisory. Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version between 4.0.0 to 4.0.5, by default, is susceptible to a heap-based buffer overflow, and...

7.5CVSS8.1AI score0.02494EPSS
Exploits10References22
OSV
OSV
added 2023/06/03 11:5 a.m.1 views

OESA-2023-1321 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices,and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful featur...

7.5CVSS6.9AI score0.01852EPSS
Exploits6References7
RedhatCVE
RedhatCVE
added 2023/05/27 6:10 p.m.25 views

CVE-2023-2879

A vulnerability was found in wireshark. This issue occurs in the GDSDB dissector, and could go into an infinite loop. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file...

7.5CVSS6.7AI score0.00113EPSS
Exploits1References4
NVD
NVD
added 2023/05/26 9:15 p.m.16 views

CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.8AI score0.00113EPSS
Exploits1References7
UbuntuCve
UbuntuCve
added 2023/05/26 9:15 p.m.23 views

CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.8AI score0.00113EPSS
Exploits1References4
OSV
OSV
added 2023/05/26 9:15 p.m.1 views

UBUNTU-CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.00113EPSS
Exploits1References5
Prion
Prion
added 2023/05/26 9:15 p.m.21 views

Design/Logic Flaw

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00113EPSS
Exploits1References6Affected Software2
Positive Technologies
Positive Technologies
added 2023/05/26 12:0 a.m.1 views

PT-2023-21965 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.13 Wireshark versions 4.0.0 through 4.0.5 Description: The issue allows for denial of service through packet injection or a crafted capture file, caused by an infinite loop in the GDSDB. Recommendations: F...

9.8CVSS7.3AI score0.02494EPSS
Exploits36References189
CVE
CVE
added 2023/05/26 12:0 a.m.139 views

CVE-2023-2879

CVE-2023-2879 affects Wireshark’s GDSDB dissector, causing an infinite loop and denial of service when processing certain packets or capture files. The vulnerability exists in Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13. Connected advisories confirm the issue and note that fixes have been released (e....

7.5CVSS7.3AI score0.00113EPSS
Exploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/26 12:0 a.m.4 views

CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

6.3CVSS7.5AI score0.00113EPSS
Exploits1References6
Cvelist
Cvelist
added 2023/05/26 12:0 a.m.17 views

CVE-2023-2879

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file...

6.3CVSS7.7AI score0.00113EPSS
Exploits1References6
Rows per page
Query Builder