CVE-2023-2856

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
May 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-285607.8Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.CVE-2023-285619.8Memory corruption in QESL while processing payload from external ESL device to firmware.CVE-2023-285629.8Memory corruption while handling payloads from remote ESL.CVE-2023-285635.5Information disclosure in IOE Firmware while handling WMI command.CVE-2023-285647.8Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.CVE-2023-285657.8Memory corruption in WLAN HAL while handling command streams through WMI interfaces.CVE-2023-285665.5Information disclosure in WLAN HAL while handling the WMI state info command.CVE-2023-285677.8Memory corruption in WLAN HAL while handling command through WMI interfaces.CVE-2023-285685.5Information disclosure in WLAN HAL when reception status handler is called.CVE-2023-285695.5Information disclosure in WLAN HAL while handling command through WMI interfaces.CVE-2023-28576.5BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture fileCVE-2023-285707.8Memory corruption while processing audio effects.
CVE-2023-2856: Medium severity, CVSS 6.5 | Vulnix