Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-0417

Опубликовано: 27 янв. 2023
Источник: redhat
CVSS3: 6.5

Описание

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

A flaw was found in the NFS dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing excessive consumption of resources, resulting in a Denial of Service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6wiresharkOut of support scope
Red Hat Enterprise Linux 7wiresharkOut of support scope
Red Hat Enterprise Linux 8wiresharkWill not fix
Red Hat Enterprise Linux 9wiresharkWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-789
https://bugzilla.redhat.com/show_bug.cgi?id=2165846wireshark: NFS dissector memory leak

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
ubuntu
около 3 лет назад

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

CVSS3: 6.3
nvd
около 3 лет назад

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

CVSS3: 6.3
debian
около 3 лет назад

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 ...

CVSS3: 6.5
github
около 3 лет назад

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

suse-cvrf
почти 3 года назад

Security update for wireshark

6.5 Medium

CVSS3