Denial of Service through GDSDB Infinite Loop in Wireshark Software by The Wireshark Team

CVE-2023-2879

What is CVE-2023-2879?

The GDSDB infinite loop vulnerability found in Wireshark versions 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 can lead to a denial of service condition. This issue arises when an attacker exploits the flaw using either specially crafted packet injections or by providing a malicious capture file. As a result, affected systems may become unresponsive, impacting network monitoring and analysis capabilities. Users are encouraged to update to the latest versions to mitigate potential risks associated with this vulnerability.

References