CVE-2023-1161
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows...
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-1161- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2023-23443
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2023-23443- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rf23-mj2w-9g24
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows...
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
GHSA-rf23-mj2w-9g24- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-1161- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-1161
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
ALPINE-CVE-2023-1161- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-03
OSV
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-1161- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2023-1161
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2023-1161- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2023-1189
wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.
Security Fix(es):
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file(CVE-2023-1161)
- Record
OESA-2023-1189- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2023-1190
wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.
Security Fix(es):
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file(CVE-2023-1161)
- Record
OESA-2023-1190- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-1161
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2023-1161- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12785-1 No score
libwireshark16-4.0.4-2.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12785-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1762-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
- CVE-2023-1161: Fixed crash in ISO 15765 and ISO 10681 dissector (bsc#1208914).
Update to 3.6.12:
- Record
SUSE-SU-2023:1762-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.18 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.19 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.20 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.21 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.22 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.23 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkAlpine:v3.24 |
3.6.0 up to 4.0.4-r0 | 4.0.4-r0 |
wiresharkDebian:12 |
before 4.0.6-1~deb12u1, plus listed versions 4.0.3-14.0.5-1~exp1 |
4.0.6-1~deb12u1 |
wiresharkDebian:13 |
before 4.0.6-1 | 4.0.6-1 |
wiresharkDebian:14 |
before 4.0.6-1 | 4.0.6-1 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:10 From an advisory covering 4 CVEs |
before 2.6.20-0+deb10u6, plus listed versions 2.6.10-12.6.20-0+deb10u12.6.20-0+deb10u22.6.20-0+deb10u32.6.20-0+deb10u42.6.20-0+deb10u52.6.8-1.12.6.9-1 |
2.6.20-0+deb10u6 |
wiresharkDebian:11 From an advisory covering 47 CVEs |
before 3.4.16-0+deb11u1, plus listed versions 3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.16-0+deb11u1 |
wiresharkDebian:12 From an advisory covering 14 CVEs |
before 4.0.6-1~deb12u1, plus listed versions 4.0.3-14.0.5-1~exp1 |
4.0.6-1~deb12u1 |
wiresharkopenEuler:22.03-LTS |
before 3.6.11-2.oe2203 | 3.6.11-2.oe2203 |
wiresharkopenEuler:22.03-LTS-SP1 |
before 3.6.11-2.oe2203sp1 | 3.6.11-2.oe2203sp1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 3.6.12-150000.3.86.1 | 3.6.12-150000.3.86.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 |
before 3.6.12-150000.3.86.1 | 3.6.12-150000.3.86.1 |
wiresharkSUSE:Linux Enterprise Real Time 15 SP3 |
before 3.6.12-150000.3.86.1 | 3.6.12-150000.3.86.1 |
wiresharkopenSUSE:Leap 15.4 |
before 3.6.12-150000.3.86.1 | 3.6.12-150000.3.86.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkopenSUSE:Tumbleweed |
before 4.0.4-2.1 | 4.0.4-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1161 is a medium vulnerability (CVSS 6.3) in Wireshark, published March 6, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in wireshark 4.0.4-r0.
References
wireshark.org/security/wnpa-sec-2023-08.html
gitlab.com/wireshark/wireshark/-/issues/18839
lists.debian.org/debian-lts-announce/2023/04/msg00029.html
debian.org/security/2023/dsa-5429
security.gentoo.org/glsa/202309-02
Show 13 moreShow less
nvd.nist.gov/vuln/detail/CVE-2023-1161
github.com/advisories/GHSA-rf23-mj2w-9g24
security.alpinelinux.org/vuln/CVE-2023-1161
security-tracker.debian.org/tracker/CVE-2023-1161
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1189
suse.com/support/update/announcement/2023/suse-su-20231762-1
bugzilla.suse.com/1208914
ubuntu.com/security/CVE-2023-1161
cve.org/CVERecord?id=CVE-2023-1161