CVE-2023-0416

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@gitlab.com

Published

2023-01-26

Last modified

2025-11-03

Weaknesses

CWE-404

Affected products

• Wireshark (Wireshark)
• Wireshark (Wireshark Foundation)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json
• https://gitlab.com/wireshark/wireshark/-/issues/18779
• https://www.wireshark.org/security/wnpa-sec-2023-04.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html