Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-0666
HistoryJun 07, 2023 - 12:00 a.m.

CVE-2023-0666

2023-06-0700:00:00
ubuntu.com
ubuntu.com
16
rtps packet validation
wireshark 4.0.5
heap-based buffer overflow
code execution
process context
unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

48.5%

Due to failure in validating the length provided by an attacker-crafted
RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible
to a heap-based buffer overflow, and possibly code execution in the context
of the process running Wireshark.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

48.5%