CVE-2023-5371

MEDIUM

Wireshark < 3.6.17 - Resource Allocation Without Limits

Title source: rule

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

CVSS v3 5.3

EPSS 0.0005

EPSS Percentile 15.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-770 CWE-789

Status published

Products (3)

wireshark/wireshark 3.6.0 - 3.6.17

Wireshark Foundation/Wireshark 3.6.0 - 3.6.17

Wireshark Foundation/Wireshark 4.0.0 - 4.0.9

Published Oct 04, 2023

Tracked Since Feb 18, 2026