CVE-2023-4512
MEDIUMWireshark 4.0.0-4.0.6 - Denial of Service via CBOR Dissector
Title source: llmDescription
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
References (6)
Core 6
Core References
Issue Tracking, Vendor Advisory
https://www.wireshark.org/security/wnpa-sec-2023-23.html
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/
Exploit, Issue Tracking, Patch issue-tracking
https://gitlab.com/wireshark/wireshark/-/issues/19144
Scores
CVSS v3
5.3
EPSS
0.0049
EPSS Percentile
37.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-674
Status
published
Products (2)
wireshark/wireshark
4.0.0 - 4.0.7
Wireshark Foundation/Wireshark
4.0.0 - 4.0.8
Published
Aug 24, 2023
Tracked Since
Feb 18, 2026