BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
References
Link | Resource |
---|---|
https://gitlab.com/wireshark/wireshark/-/issues/19259 | Exploit Issue Tracking Patch |
https://www.wireshark.org/security/wnpa-sec-2023-25.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Aug 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
01 Mar 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 Sep 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Sep 2023, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
29 Aug 2023, 17:09
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-401 | |
CPE | cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* | |
First Time |
Wireshark wireshark
Wireshark |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | (MISC) https://www.wireshark.org/security/wnpa-sec-2023-25.html - Vendor Advisory | |
References | (MISC) https://gitlab.com/wireshark/wireshark/-/issues/19259 - Exploit, Issue Tracking, Patch |
24 Aug 2023, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-24 07:15
Updated : 2024-08-29 15:15
NVD link : CVE-2023-4513
Mitre link : CVE-2023-4513
CVE.ORG link : CVE-2023-4513
JSON object : View
Products Affected
wireshark
- wireshark
CWE
CWE-401
Missing Release of Memory after Effective Lifetime