CVEvulnerability
CVE-2023-1161
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
- Weaknesses
- CWE-120
Description
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.6.0 < 3.6.12)
• wireshark wireshark (>= 4.0.0 < 4.0.4)
• debian debian linux 10.0
• debian debian linux 12.0
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/18839 Issue Tracking, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202309-02 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5429 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2023-08.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/18839 Issue Tracking, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://security.gentoo.org/glsa/202309-02 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5429 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2023-08.html Vendor Advisory