Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6174

Fixed in a distro release EPSS <1%CVSS 6.3

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file

Published 2023-11-16 · CVE record · OSV

Products: Wireshark Foundation Wireshark

Distro releases

ReleasePackageFixed in
Amazon Linux 2023wireshark-cli1:4.0.8-2.amzn2023.0.3
Amazon Linux 2023wireshark-devel1:4.0.8-2.amzn2023.0.3
Debian 12wireshark4.0.11-1~deb12u1
Debian 13wireshark4.0.11-1
Debian 14wireshark4.0.11-1
SUSE Linux Enterprise Module for Basesystem 15 SP6wireshark4.2.6-150600.18.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6wireshark4.2.6-150600.18.6.1
openSUSE Leap 15.6wireshark4.2.6-150600.18.6.1
openSUSE Tumbleweedwireshark4.0.11-2.1