Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
CVE-2023-4511
7.5HIGH
What is CVE-2023-4511?
A vulnerability in the BT SDP dissector component of Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 permits an attacker to exploit an infinite loop via packet injection or by using a specially crafted capture file. This can result in a denial of service, disrupting the operation of the affected instances of Wireshark. For further details, refer to the official security advisory and the GitLab issue report.
Affected Version(s)
Wireshark 4.0.0 < 4.0.8
Wireshark 3.6.0 < 3.6.16