CVE Catalog
CVE-2023-4513
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.49%
38th percentile - higher than 38% of all known CVEs
Summary
Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 have a memory leak in the BT SDP dissector, allowing denial of service via packet injection or crafted capture files.
Risk Assessment
Organizations may be vulnerable to denial of service attacks that could disrupt the operation of network traffic monitoring systems.
Recommendation
It is recommended to update Wireshark to the latest version to mitigate this vulnerability.
Original NVD description (English source)
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file