CVE-2023-0666
Wireshark RTPS Parsing Buffer Overflow
Summary
Wireshark RTPS Parsing Buffer Overflow
Original description
The description as published by the source.
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-0666 wireshark Fixed in: 3.4.16-0+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory takeonme.org
- advisory debian.org
- advisory wireshark.org
- advisory wireshark.org
- report gitlab.com
- web lists.debian.org