CVE-2023-0416
Assigner: GitLab
Published: 2023-01-24T00:00:00
State: PUBLISHED
descriptions: value: GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
affected: vendor: Wireshark Foundation
product: Wireshark
versions: version: >=4.0.0, <4.0.3
status: affected
version: >=3.6.0, <3.6.11
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: Expired pointer dereference in Wireshark