CVE-2023-4512

MediumCVSS 5.3

Published: 24/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

Wireshark versions 4.0.0 to 4.0.6 contain a bug in the CBOR dissector that can lead to application crashes. An attacker can exploit this via packet injection or a crafted capture file to cause denial of service.

Risk Assessment

Organizations may experience service interruptions, potentially leading to data loss or reduced performance. Possible attacks could impact the availability of network traffic analysis systems.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.

Original NVD description (English source)

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file