Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2023-0667 Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior,…

Description

Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark

Produits et versions touchés

Produit Versions touchées Corrigé en
Wireshark 4.0 premières → 4.0.5 4.0.6
Wireshark 3.6 premières → 3.6.13 3.6.14

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Wireshark

Les 185 CVE de Wireshark →
CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Moyenne CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 Élevée CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Moyenne CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Moyenne
Suivre cette CVE