CVE-2023-5371
Fixed in a distro release EPSS <1%CVSS 5.3
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
Products: Wireshark Foundation Wireshark
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | wireshark-cli | 1:4.0.8-2.amzn2023.0.2 |
| Amazon Linux 2023 | wireshark-devel | 1:4.0.8-2.amzn2023.0.2 |
| Debian 12 | wireshark | 4.0.11-1~deb12u1 |
| Debian 13 | wireshark | 4.0.10-1 |
| Debian 14 | wireshark | 4.0.10-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | wireshark | 3.6.17-150000.3.103.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | wireshark | 3.6.17-150000.3.103.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | wireshark | 4.2.6-150600.18.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | wireshark | 3.6.17-150000.3.103.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | wireshark | 3.6.17-150000.3.103.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | wireshark | 4.2.6-150600.18.6.1 |
| SUSE Manager Proxy 4.2 | wireshark | 3.6.17-150000.3.103.1 |
| SUSE Manager Server 4.2 | wireshark | 3.6.17-150000.3.103.1 |
| openSUSE Leap 15.6 | wireshark | 4.2.6-150600.18.6.1 |
| openSUSE Tumbleweed | wireshark | 4.0.10-1.1 |