Lucene search

K
vulnrichmentGitLabVULNRICHMENT:CVE-2023-4512
HistoryAug 24, 2023 - 6:30 a.m.

CVE-2023-4512 Uncontrolled Recursion in Wireshark

2023-08-2406:30:45
CWE-674
GitLab
github.com
1
wireshark
uncontrolled recursion
cve-2023-4512
cbor dissector
denial of service
packet injection

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

31.6%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

31.6%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial