CVE-2023-0667mediumCWE-122

CVE-2023-0667: falha de média gravidade em Wireshark

Wireshark MSMMS parsing buffer overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Wireshark+ Monitorar wireshark

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 2.0%
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
Wireshark Foundation · Wireshark
CVEs relacionadas — Wireshark

No mesmo produto, das mais perigosas para as menos.

CVE-2021-39925HIGHCVE-2021-39925EPSS 8.1%CVE-2021-39926HIGHCVE-2021-39926EPSS 8.0%CVE-2021-39928HIGHCVE-2021-39928EPSS 5.9%CVE-2021-39922HIGHCVE-2021-39922EPSS 5.6%CVE-2021-39924HIGHCVE-2021-39924EPSS 5.3%CVE-2023-1992MEDIUMCVE-2023-1992EPSS 4.6%