CVE-2023-4511
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 contain a vulnerability in the BT SDP dissector that can lead to an infinite loop. An attacker can exploit this flaw through packet injection or by crafting a malicious capture file.
Risk Assessment
This vulnerability can lead to denial of service, affecting the availability of the network traffic analysis system. Organizations may experience interruptions in services related to network monitoring.
Recommendation
It is recommended to update Wireshark to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for potential attack attempts is advised.
Original NVD description (English source)
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file