CVE-2023-2906

CVSS V2 None CVSS V3 None
Description
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
Overview
  • CVE ID
  • CVE-2023-2906
  • Assigner
  • AHA
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-25T20:41:19.403Z
  • Last Modified Date
  • 2023-08-25T20:41:19.403Z
Weakness Enumerations
CWE URL
CWE-369 http://cwe.mitre.org/data/definitions/369.html
References
Reference URL Reference Tags
https://takeonme.org/cves/CVE-2023-2906.html exploit third-party-advisory technical-description
https://gitlab.com/wireshark/wireshark/-/issues/19229 patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-2906
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2906
History
Created Old Value New Value Data Type Notes
2024-06-24 21:53:21 Added to TrackCVE