CVE-2023-6175

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Wireshark Foundation	Wireshark	>= 4.0.0, < 4.0.11; >= 3.6.0, < 3.6.19
wireshark	wireshark	>= 4.0.0, < 4.0.11; >= 3.6.0, < 3.6.19

References

https://gitlab.com/wireshark/wireshark/-/issues/19404Issue Tracking
https://www.wireshark.org/security/wnpa-sec-2023-29.htmlVendor Advisory
https://gitlab.com/wireshark/wireshark/-/issues/19404Issue Tracking
https://lists.debian.org/debian-lts-announce/2024/02/msg00016.html
https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html
https://www.wireshark.org/security/wnpa-sec-2023-29.htmlVendor Advisory

Timeline

Published: Mar 26, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-61764.7A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occu CVE-2023-61786.5An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus CVE-2023-61797.8Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) att CVE-2023-61805.3The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential D CVE-2023-61819.8An oversight in BCB handling of reboot reason that allows for persistent code execution CVE-2023-61847.2Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting CVE-2023-61858.8Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitr CVE-2023-61868.8Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warnin CVE-2023-61878.8The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro CVE-2023-61889.8A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the fi CVE-2023-61895.3Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using CVE-2023-61909.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Inf