← All advisories

Unrated severityNVD Advisory· Published Jul 14, 2023· Updated Nov 3, 2025

Mismatched Memory Management Routines in Wireshark

CVE-2023-3648

Description

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12

Wireshark/Wiresharkllm-fuzzy2 versions
>=4.0.0 <=4.0.6, >=3.6.0 <=3.6.14+ 1 more
- (no CPE)range: >=4.0.0 <=4.0.6, >=3.6.0 <=3.6.14
- (no CPE)range: 4.0.0
osv-coords10 versions
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Server%204.2
< 3.6.15-150000.3.97.1+ 9 more
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 4.0.7-2.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1
- (no CPE)range: < 3.6.15-150000.3.97.1

Patches

Vulnerability mechanics

References

2

gitlab.com/wireshark/wireshark/-/issues/19105mitreissue-tracking
www.wireshark.org/security/wnpa-sec-2023-21.htmlmitre

News mentions

0

No linked articles in our index yet.