Description
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
References (7)
Scores
CVSS v3
5.3
EPSS
0.0001
EPSS Percentile
1.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Details
CWE
CWE-835
Status
published
Products (3)
wireshark/wireshark
3.6.0 - 3.6.15
Wireshark Foundation/Wireshark
3.6.0 - 3.6.16
Wireshark Foundation/Wireshark
4.0.0 - 4.0.8
Published
Aug 24, 2023
Tracked Since
Feb 18, 2026