CVE-2023-3648

MediumCVSS 5.3

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Wireshark versions 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 contain a vulnerability that can lead to a crash of the Kafka dissector. An attacker can exploit this via packet injection or a crafted capture file to cause a denial of service.

Risk Assessment

This vulnerability poses a denial of service risk, potentially disrupting network service availability for users. Organizations may experience interruptions in network traffic analysis systems.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for potential attack attempts is advised.

Original NVD description (English source)

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file