CVE-2023-0411

Published: Jan 26, 2023Modified: Nov 3, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Affected (2)

Products: Wireshark: Wireshark

Wireshark

1 product

Wireshark

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	From 3.6.0 to 3.6.10
Wireshark Wireshark	From 4.0.0 to 4.0.2

Related CWEs

CWE-834

Excessive Iteration

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

References (13)

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json

Source: cve@gitlab.com

Third Party Advisory

https://gitlab.com/wireshark/wireshark/-/issues/18711

Source: cve@gitlab.com

Issue TrackingPatchThird Party Advisory

https://gitlab.com/wireshark/wireshark/-/issues/18720

Source: cve@gitlab.com

Issue TrackingPatchThird Party Advisory

https://gitlab.com/wireshark/wireshark/-/issues/18737

Source: cve@gitlab.com

Issue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html

Source: cve@gitlab.com

https://www.wireshark.org/security/wnpa-sec-2023-06.html

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json