CVE-2023-2855
published 2023-05-26CVE-2023-2855: Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
PriorityP427medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.65%
73.8th percentile
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | wireshark | < wireshark 4.0.6-1~deb12u1 (bookworm) | wireshark 4.0.6-1~deb12u1 (bookworm) |
| wireshark | wireshark | >= 0 < 3.4.16-0+deb11u1 | 3.4.16-0+deb11u1 |
| wireshark | wireshark | >= 0 < 4.0.6-1~deb12u1 | 4.0.6-1~deb12u1 |
| wireshark | wireshark | >= 0 < 4.0.6-1 | 4.0.6-1 |
| wireshark | wireshark | >= 0 < 4.0.6-1 | 4.0.6-1 |
| wireshark | wireshark | >= 3.6.0 < 3.6.14 | 3.6.14 |
| wireshark | wireshark | >= 4.0.0 < 4.0.6 | 4.0.6 |
| wireshark_foundation | wireshark | — | — |
| wireshark_foundation | wireshark | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Candump log file parser crash
vendor_redhat·2023-05-11·CVSS 5.3
CVE-2023-2855 [MEDIUM] CWE-121 wireshark: Candump log file parser crash
wireshark: Candump log file parser crash
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
A flaw was found in the Candump log file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service.
Statement: Wireshark as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability because the Candump log file parser was introduced in a newer Wireshark version.
Package: wireshark (Red Hat Enterprise Linux 6) - Out of support scope
Package: wireshark (Red Hat Enterprise Linux 7) - Out of support scope
Package: wireshark (Red Hat Enterprise Linux 8) - Not affected
Debian
CVE-2023-2855: wireshark - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows ...
vendor_debian·2023·CVSS 5.3
CVE-2023-2855 [MEDIUM] CVE-2023-2855: wireshark - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows ...
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Scope: local
bookworm: resolved (fixed in 4.0.6-1~deb12u1)
bullseye: resolved (fixed in 3.4.16-0+deb11u1)
forky: resolved (fixed in 4.0.6-1)
sid: resolved (fixed in 4.0.6-1)
trixie: resolved (fixed in 4.0.6-1)
GHSA
GHSA-ff83-59jh-6r49: Candump log parser crash in Wireshark 4
ghsa_unreviewed·2023-05-26
CVE-2023-2855 [MEDIUM] CWE-787 GHSA-ff83-59jh-6r49: Candump log parser crash in Wireshark 4
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
OSV
CVE-2023-2855: Candump log parser crash in Wireshark 4
osv·2023-05-26·CVSS 6.5
CVE-2023-2855 [MEDIUM] CVE-2023-2855: Candump log parser crash in Wireshark 4
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.jsonhttps://gitlab.com/wireshark/wireshark/-/issues/19062https://security.gentoo.org/glsa/202309-02https://www.debian.org/security/2023/dsa-5429https://www.wireshark.org/security/wnpa-sec-2023-12.htmlhttps://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.jsonhttps://gitlab.com/wireshark/wireshark/-/issues/19062https://lists.debian.org/debian-lts-announce/2024/09/msg00049.htmlhttps://security.gentoo.org/glsa/202309-02https://www.debian.org/security/2023/dsa-5429https://www.wireshark.org/security/wnpa-sec-2023-12.html
2023-05-26
Published