Uncontrolled Recursion in Wireshark
CVE-2023-4512

5.3MEDIUM

Key Information:

Vendor: Wireshark
Status: Wireshark
Vendor: CVE Published:; 24 August 2023

What is CVE-2023-4512?

The CBOR dissector in Wireshark versions 4.0.0 through 4.0.6 is subject to a vulnerability that can lead to a denial of service. This is achieved through packet injection or the use of a specially crafted capture file, which causes the application to crash. Users of these versions should promptly update to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Wireshark 4.0.0 < 4.0.8

References

https://www.wireshark.org/security/wnpa-sec-2023-23.html

https://gitlab.com/wireshark/wireshark/-/issues/19144

issue-tracking

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Aug 24, 2023
Vulnerability Reserved
Aug 24, 2023

Credit

Simone Di Maria

JSON

Wireshark