fr Sign in

5.3 Medium

CVE-2023-2857 BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Description

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Affected products and versions

Product	Affected versions	Fixed in
Wireshark 4.0	4.0.0 → < 4.0.6	4.0.6
Wireshark 3.6	3.6.0 → < 3.6.14	3.6.14

References

www.wireshark.org www.wireshark.org
gitlab.com gitlab.com
gitlab.com gitlab.com
DSA-5429 www.debian.org
GLSA-202309-02 security.gentoo.org

Timeline

Published May 26, 2023
Last modified January 15, 2025

The 185 CVEs of Wireshark →

CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium

Track this CVE