CVE-2023-4512

MEDIUM

Wireshark <4.0.7 - DoS

Title source: llm

Description

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

References (6)

[Mailing List] https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html

[Issue Tracking, Vendor Advisory] https://www.wireshark.org/security/wnpa-sec-2023-23.html

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/

[Exploit, Issue Tracking, Patch] https://gitlab.com/wireshark/wireshark/-/issues/19144

Scores

CVSS v3 5.3

EPSS 0.0004

EPSS Percentile 12.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-674

Status published

Products (2)

wireshark/wireshark 4.0.0 - 4.0.7

Wireshark Foundation/Wireshark 4.0.0 - 4.0.8

Published Aug 24, 2023

Tracked Since Feb 18, 2026