CVE-2023-4513CWE-401

Missing Release of Memory after Effective Lifetime in Wireshark

Medium · published August 24, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2023-08-24T06:30Z
EPSS history
Timeline
  • 24 AUG 06:30Z
    Missing Release of Memory after Effective Lifetime in Wireshark
    cvelistv5