First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-5371

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-789 CWE-770

Affected software

Vendor	Product	Versions
Wireshark Foundation	Wireshark	>= 4.0.0, < 4.0.9; >= 3.6.0, < 3.6.17

References

Timeline

Published: Oct 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-53710In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read Kerne CVE-2023-537118.2In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subreques CVE-2023-53712In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is tri CVE-2023-537137.8In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode CVE-2023-53714In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdc_crtc_set_crc_source(CVE-2023-53715In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Appare CVE-2023-53716In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in __skb_tstamp_tx() Commit 50749f2dd685 ("tcp/udp: CVE-2023-53717In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_c CVE-2023-537187.8In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not swap cpu_buffer during resize process When ring_bu CVE-2023-53719In the Linux kernel, the following vulnerability has been resolved: serial: arc_uart: fix of_iomap leak in `arc_serial_probe` Smatch repor CVE-2023-53727.2The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versi CVE-2023-53720In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited co

CVE-2023-5371: Medium severity, CVSS 6.5 | Vulnix