CVE-2023-3649

MediumCVSS 5.3

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

Wireshark versions 4.0.0 to 4.0.6 contain a bug in the iSCSI dissector that can lead to application crashes. An attacker can exploit this via packet injection or a crafted capture file to cause denial of service.

Risk Assessment

Organizations may experience disruptions in network services, potentially leading to loss of availability and financial losses.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability and minimize the risk of denial of service.

Original NVD description (English source)

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file