Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Mar 26, 2024· Updated Mar 27, 2026

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

CVE-2023-6175

Description

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

Affected products

11

osv-coords10 versions
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6
< 3.6.19-150000.3.106.1+ 9 more
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 4.2.6-150600.18.6.1
- (no CPE)range: < 4.0.11-2.1
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 4.2.6-150600.18.6.1
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 3.6.19-150000.3.106.1
- (no CPE)range: < 4.2.6-150600.18.6.1
Wireshark/Wiresharkv5
Range: 4.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

gitlab.com/wireshark/wireshark/-/issues/19404mitreissue-tracking
www.wireshark.org/security/wnpa-sec-2023-29.htmlmitre

News mentions

0

No linked articles in our index yet.