CVE-2023-2854 : BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows den

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Published 2023-05-26 21:15:18

Updated 2023-10-20 18:07:52

Source GitLab Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2023-2854

Debian » Debian Linux » Version: 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark
Versions from including (>=) 3.6.0 and before (<) 3.6.14
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark
Versions from including (>=) 4.0.0 and before (<) 4.0.6
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.3	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L	1.8	3.4	GitLab Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

https://www.debian.org/security/2023/dsa-5429

Debian -- Security Information -- DSA-5429-1 wireshark
Third Party Advisory

CVEs referencing this url
https://www.wireshark.org/security/wnpa-sec-2023-17.html

Wireshark • wnpa-sec-2023-17 BLF file parser crash
Vendor Advisory
https://security.gentoo.org/glsa/202309-02

Wireshark: Multiple Vulnerabilities (GLSA 202309-02) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://gitlab.com/wireshark/wireshark/-/issues/19084

Heap Buffer Overflow blf_read_apptextmessage Function (#19084) · Issues · Wireshark Foundation / wireshark · GitLab
Exploit;Issue Tracking;Patch;Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json

2023/CVE-2023-2854.json · master · GitLab.org / cves · GitLab
Third Party Advisory

Jump to