CVE-2023-6175: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

High severity · published Mar 26, 2024

CVE-2023-6175

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

7.8

CVSS

3.5%

EPSS

On KEV

Description

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)3.5% · higher than 89% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Wireshark · Wireshark Foundation

4.0.0 before 4.0.11; 3.6.0 before 3.6.19 · source: vendor, NVD, CISA

Affected product

Wireshark

Wireshark Foundation

All Wireshark CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-6175

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-6175

Issue Tracking

https://gitlab.com/wireshark/wireshark/-/issues/19404

Vendor Advisory

https://www.wireshark.org/security/wnpa-sec-2023-29.html

lists.debian.org

https://lists.debian.org/debian-lts-announce/2024/02/msg00016.html

lists.debian.org

https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html