CVE-2023-2906
MEDIUMWireshark 2.0.0-4.0.7 - Denial of Service via CP2179 Packet Length Validation Failure
Title source: llmDescription
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
References (6)
Core 6
Core References
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/
Exploit, Third Party Advisory exploit
third-party-advisory
technical-description
https://takeonme.org/cves/CVE-2023-2906.html
Exploit, Issue Tracking, Patch, Third Party Advisory patch
https://gitlab.com/wireshark/wireshark/-/issues/19229
Scores
CVSS v3
6.5
EPSS
0.0277
EPSS Percentile
84.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-369
Status
published
Products (1)
wireshark/wireshark
2.0.0 - 4.0.7
Published
Aug 25, 2023
Tracked Since
Feb 18, 2026