Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Metrics
Affected Vendors & Products
References
History
Tue, 07 Jan 2025 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: AHA
Published: 2023-06-07T02:25:27.974Z
Updated: 2025-01-07T15:03:06.503Z
Reserved: 2023-02-03T22:06:14.542Z
Link: CVE-2023-0666

Updated: 2024-08-02T05:17:50.337Z

Status : Modified
Published: 2023-06-07T03:15:09.000
Modified: 2025-01-07T16:15:28.873
Link: CVE-2023-0666
