Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-0668
HistoryJun 07, 2023 - 12:00 a.m.

CVE-2023-0668

2023-06-0700:00:00
ubuntu.com
ubuntu.com
21
wireshark
validation failure
buffer overflow
code execution
ieee-c37.118
unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

48.1%

Due to failure in validating the length provided by an attacker-crafted
IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is
susceptible to a heap-based buffer overflow, and possibly code execution in
the context of the process running Wireshark.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

48.1%