CVE-2023-2858

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
Wireshark FoundationWireshark>=4.0.0, <4.0.6; >=3.6.0, <3.6.14

References

Timeline

Published
May 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-285807.8Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.CVE-2023-285819.8Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.CVE-2023-285829.8Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.CVE-2023-285837.8Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.CVE-2023-285847.5Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).CVE-2023-285858.8Memory corruption while loading an ELF segment in TEE Kernel.CVE-2023-285866.5Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.CVE-2023-285877.8Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.CVE-2023-285887.5Transient DOS in Bluetooth Host while rfc slot allocation.CVE-2023-28598.8Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-285967.8Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged uCVE-2023-285977.5Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB
CVE-2023-2858: Medium severity, CVSS 6.5 | Vulnix