Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-2854

Опубликовано: 26 мая 2023
Источник: debian
EPSS Низкий

Описание

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharkfixed4.0.6-1~exp1experimentalpackage
wiresharkfixed4.0.6-1package
wiresharknot-affectedbullseyepackage
wiresharknot-affectedbusterpackage

Примечания

  • https://www.wireshark.org/security/wnpa-sec-2023-17.html

  • https://gitlab.com/wireshark/wireshark/-/issues/19084

  • Introduced by: https://gitlab.com/wireshark/wireshark/-/commit/19ed05756313a0181fd3188eae0557f688bfddaf (v3.7.0)

EPSS

Процентиль: 15%
0.00049
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS3: 6.5
redhat
больше 2 лет назад

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS3: 5.3
nvd
больше 2 лет назад

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

CVSS3: 5.3
github
больше 2 лет назад

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

suse-cvrf
больше 1 года назад

Security update for wireshark

EPSS

Процентиль: 15%
0.00049
Низкий