Skip to content
fr Sign in
6.5 Medium

CVE-2023-0667 Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior,…

Description

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

Affected products and versions

Product Affected versions Fixed in
Wireshark 4.0 earliest → 4.0.5 4.0.6
Wireshark 3.6 earliest → 3.6.13 3.6.14

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Wireshark

The 185 CVEs of Wireshark →
CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium
Track this CVE