Heap-based Buffer Overflow

🗓️ 28 Nov 2023 14:33:13Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 38 Views

Wireshark vulnerable to Heap-based Buffer Overflo

Reporter	Title	Published	Views	Family All 122
Tenable Nessus	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-440)	15 Dec 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : wireshark (ALAS-2023-2348)	4 Dec 202300:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: wireshark (CVE-2023-6175)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dla-3746 : libwireshark-data - security update	1 Mar 202400:00	–	nessus
Tenable Nessus	Debian dla-3906 : libwireshark-data - security update	30 Sep 202400:00	–	nessus
Tenable Nessus	Debian DSA-5559-1 : wireshark - security update	20 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 39 : wireshark (2024-b72131479b)	10 Feb 202400:00	–	nessus
Tenable Nessus	Fedora 38 : wireshark (2024-fdc7dfb959)	11 Feb 202400:00	–	nessus
Tenable Nessus	Wireshark 3.6.x < 3.6.19 A Vulnerability (macOS)	15 Nov 202300:00	–	nessus
Tenable Nessus	Wireshark 4.0.x < 4.0.11 Multiple Vulnerabilities (macOS)	15 Nov 202300:00	–	nessus

Vulners

Node

wireshark wiresharkMatch3.4.3-1debian

AND

wireshark wiresharkMatch3.2.8-0.1debian

AND

debian debian_linuxMatch999

OR

wireshark wiresharkMatch4.0.5-r0os

AND

wireshark wiresharkMatch4.0.10-r0os

AND

wireshark wiresharkMatch4.0.6-r0os

AND

wireshark wiresharkMatch4.0.5-r1os

AND

wireshark wiresharkMatch4.0.7-r0os

AND

alpinelinux alpine_linuxMatch3.18

OR

wireshark wiresharkMatch4.0.1-r0os

AND

wireshark wiresharkMatch4.0.7-r0os

AND

wireshark wiresharkMatch4.0.4-r1os

AND

wireshark wiresharkMatch3.4.8-r0os

AND

wireshark wiresharkMatch4.0.5-r0os

AND

wireshark wiresharkMatch4.0.8-r0os

AND

wireshark wiresharkMatch3.4.5-r0os

AND

wireshark wiresharkMatch3.4.4-r0os

AND

wireshark wiresharkMatch3.6.3-r1os

AND

wireshark wiresharkMatch3.2.4-r0os

AND

wireshark wiresharkMatch4.0.4-r0os

AND

wireshark wiresharkMatch3.4.9-r0os

AND

wireshark wiresharkMatch3.6.5-r1os

AND

wireshark wiresharkMatch3.6.8-r0os

AND

wireshark wiresharkMatch4.0.5-r1os

AND

wireshark wiresharkMatch4.0.6-r1os

AND

wireshark wiresharkMatch3.6.7-r0os

AND

wireshark wiresharkMatch4.0.10-r0os

AND

wireshark wiresharkMatch3.6.5-r0os

AND

wireshark wiresharkMatch3.4.7-r0os

AND

wireshark wiresharkMatch3.2.3-r1os

AND

wireshark wiresharkMatch4.0.0-r0os

AND

wireshark wiresharkMatch3.4.11-r0os

AND

wireshark wiresharkMatch3.6.6-r0os

AND

wireshark wiresharkMatch4.0.6-r0os

AND

wireshark wiresharkMatch4.0.3-r0os

AND

wireshark wiresharkMatch4.0.2-r0os

AND

wireshark wiresharkMatch3.4.3-r0os

AND

wireshark wiresharkMatch3.2.2-r0os

AND

wireshark wiresharkMatch3.4.13-r0os

AND

wireshark wiresharkMatch3.4.6-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

wireshark wiresharkMatch4.0.10-r0os

AND

alpinelinux alpine_linuxMatch3.19

OR

wireshark wiresharkMatch2.6.20-0+deb10u1debian

AND

wireshark wiresharkMatch2.6.8-1.1debian

AND

debian debian_linuxMatch10

OR

wireshark wiresharkMatch3.2.8-0.1debian

AND

wireshark wiresharkMatch3.4.4-1debian

AND

debian debian_linuxMatch11

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-6175
gitlab	www.gitlab.com/wireshark/wireshark/-/issues/19404
wireshark	www.wireshark.org/security/wnpa-sec-2023-29.html

26 Mar 2024 10:55Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8

EPSS0.00045

SSVC

wireshark heap-based buffer overflow netscreen file parser vulnerability software attacker