CVE-2023-0668
Wireshark IEEE-C37.118 parsing buffer overflow
Summary
Wireshark IEEE-C37.118 parsing buffer overflow
Original description
The description as published by the source.
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-0668 wireshark Fixed in: 3.4.16-0+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory takeonme.org
- advisory debian.org
- advisory wireshark.org
- advisory wireshark.org
- report gitlab.com
- web lists.debian.org