Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-2906
HistoryAug 25, 2023 - 12:00 a.m.

CVE-2023-2906

2023-08-2500:00:00
ubuntu.com
ubuntu.com
12
wireshark
vulnerability
cp2179
packet
length
validation
denial of service

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.0%

Due to a failure in validating the length provided by an attacker-crafted
CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a
divide by zero allowing for a denial of service attack.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.0%