CVE-2023-4511
MEDIUMWireshark 3.6.0-3.6.15 4.0.0-4.0.7 - Denial of Service via BT SDP Dissector Infinite Loop
Title source: llmDescription
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
References (7)
Core 7
Core References
Vendor Advisory
https://www.wireshark.org/security/wnpa-sec-2023-24.html
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/
Issue Tracking, Patch, Vendor Advisory issue-tracking
https://gitlab.com/wireshark/wireshark/-/issues/19258
Scores
CVSS v3
5.3
EPSS
0.0044
EPSS Percentile
34.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Details
CWE
CWE-835
Status
published
Products (3)
wireshark/wireshark
3.6.0 - 3.6.15
Wireshark Foundation/Wireshark
3.6.0 - 3.6.16
Wireshark Foundation/Wireshark
4.0.0 - 4.0.8
Published
Aug 24, 2023
Tracked Since
Feb 18, 2026