Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

CVE-2023-4511

Summary

A vulnerability in the BT SDP dissector component of Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 permits an attacker to exploit an infinite loop via packet injection or by using a specially crafted capture file. This can result in a denial of service, disrupting the operation of the affected instances of Wireshark. For further details, refer to the official security advisory and the GitLab issue report.

References