CVE-2023-2854
CVE-2023-2854
This page contains facts from public vulnerability sources. Check the original advisory before updating.
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
CVSS 5.3 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
wireshark
- Versions
- >=4.0.0, <4.0.6: Affected
- >=3.6.0, <3.6.14: Affected
No fix published
wireshark Debian:12
- Versions
- 4.0.3-1
- 4.0.5-1~exp1
- Affected ranges
- ECOSYSTEM: < 4.0.6-1~deb12u1
Update to 4.0.6-1~deb12u1
wireshark Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.6-1
Update to 4.0.6-1
wireshark Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.6-1
Update to 4.0.6-1
Original sources
- https://www.wireshark.org/security/wnpa-sec-2023-17.html
- https://gitlab.com/wireshark/wireshark/-/issues/19084
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json
- https://www.debian.org/security/2023/dsa-5429
- https://security.gentoo.org/glsa/202309-02
- https://nvd.nist.gov/vuln/detail/CVE-2023-2854