CVEvulnerability
CVE-2023-0417
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-404
Description
Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.6.0 <= 3.6.10)
• wireshark wireshark (>= 4.0.0 <= 4.0.2)
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/18628 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html lists.debian.org
- https://www.wireshark.org/security/wnpa-sec-2023-02.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/18628 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://www.wireshark.org/security/wnpa-sec-2023-02.html Vendor Advisory