Unrated severityNVD Advisory· Published May 30, 2023· Updated Nov 3, 2025
CVE-2023-2952
CVE-2023-2952
Description
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15- osv-coords13 versionspkg:rpm/almalinux/wiresharkpkg:rpm/almalinux/wireshark-clipkg:rpm/almalinux/wireshark-develpkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweedpkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Server%204.2
< 1:3.4.10-6.el9+ 12 more
- (no CPE)range: < 1:3.4.10-6.el9
- (no CPE)range: < 1:3.4.10-6.el9
- (no CPE)range: < 1:3.4.10-6.el9
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 4.0.6-2.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
Patches
Vulnerability mechanics
References
6- security.gentoo.org/glsa/202309-02mitrevendor-advisory
- www.debian.org/security/2023/dsa-5429mitrevendor-advisory
- lists.debian.org/debian-lts-announce/2023/06/msg00004.htmlmitremailing-list
- gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.jsonmitre
- gitlab.com/wireshark/wireshark/-/issues/19100mitre
- www.wireshark.org/security/wnpa-sec-2023-20.htmlmitre
News mentions
0No linked articles in our index yet.