CVE-2023-0667
Wireshark MSMMS parsing buffer overflow
Summary
Wireshark MSMMS parsing buffer overflow
Original description
The description as published by the source.
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-0667 wireshark Fixed in: 3.4.16-0+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory takeonme.org
- report gitlab.com
- web lists.debian.org