CVE-2023-6174CWE-125

Out-of-bounds Read in Wireshark

Medium · published November 16, 2023

CVSS v3.1
6.3
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00746 · 54.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-11-16T11:30Z
EPSS history
Timeline
  • 16 NOV 11:30Z
    Out-of-bounds Read in Wireshark
    cvelistv5