Every CVE Search/ Get API key

CVE-2023-1993

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...

6.3 MediumFix available

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

4.09%Up 4.0 points since Apr 15, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.3

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
CVE-2023-1993
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-834
Updated
2026-11-02
EUVDEUVD-2023-24173 6.3

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
EUVD-2023-24173
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-h4rg-h5cx-4r4w 6.5

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
GHSA-h4rg-h5cx-4r4w
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-834
Updated
2026-11-02
NVD 6.3

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
CVE-2023-1993
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-834
Updated
2026-11-02
OSV 6.3

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
CVE-2023-1993
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2023-1993 6.5

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
DEBIAN-CVE-2023-1993
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVOESA-2023-1260 7.5

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.

Security Fix(es):

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1993)

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1992)

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1994)

Record
OESA-2023-1260
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1261 7.5

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.

Security Fix(es):

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1993)

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1992)

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1994)

Record
OESA-2023-1261
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-1993 6.3

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Record
UBUNTU-CVE-2023-1993
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1786479348 No score

wireshark: Fix of 26 CVEs

  • Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API)
  • CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference
  • CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds
  • CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed
  • CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE
  • CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte
  • CVE-2023-1993: LISP dissector: do not read past the LCAF payload length
  • CVE-2026-6867: SMB2 dissector: put bounds on total chained compression
  • CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length
  • CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS
  • CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places
  • CVE-2026-6534: USB HID dissector: skip items with a report size of zero
  • CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case
  • CVE-2026-5404: K12 reader: fix a possible stack overflow when writing
  • CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case
  • CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen
  • CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state
  • CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression
  • CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop
  • CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them
  • CVE-2026-6532: kismet dissector: fix a heap buffer overflow
  • CVE-2026-5401: AFP Spotlight dissector: add recursion checks
  • CVE-2026-5406: fcswils dissector: add recursion checks
  • CVE-2026-5408: BT DHT dissector: add recursion checks
  • CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks
  • CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks
  • CVE-2026-6535: epan: fix potential overflows in zlib decompression
Record
CLSA-2026-1786479348
Updated
2026-11-02
OSVopenSUSE-SU-2024:12865-1 No score

libwireshark16-4.0.5-1.1 on GA media

These are all security issues fixed in the libwireshark16-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12865-1
Updated
2026-11-02
OSVSUSE-SU-2023:1931-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405).
  • CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404).
  • CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403).

Update to 3.6.13:

Record
SUSE-SU-2023:1931-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
TuxCare:AlmaLinux:9.2
From an advisory covering 26 CVEs
 before 1:3.4.10-4.el9_2.tuxcare.els13
1:3.4.10-4.el9_2.tuxcare.els13
wireshark-cli
TuxCare:AlmaLinux:9.2
From an advisory covering 26 CVEs
 before 1:3.4.10-4.el9_2.tuxcare.els13
1:3.4.10-4.el9_2.tuxcare.els13
wireshark-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 26 CVEs
 before 1:3.4.10-4.el9_2.tuxcare.els13
1:3.4.10-4.el9_2.tuxcare.els13
wireshark
Debian:12
 before 4.0.6-1~deb12u1, plus listed versions
4.0.3-14.0.5-1~exp1
4.0.6-1~deb12u1
wireshark
Debian:13
 before 4.0.6-1
4.0.6-1
wireshark
Debian:14
 before 4.0.6-1
4.0.6-1
wireshark
Debian:10
From an advisory covering 4 CVEs
 before 2.6.20-0+deb10u6, plus listed versions
2.6.10-12.6.20-0+deb10u12.6.20-0+deb10u22.6.20-0+deb10u32.6.20-0+deb10u42.6.20-0+deb10u52.6.8-1.12.6.9-1
2.6.20-0+deb10u6
wireshark
Debian:11
From an advisory covering 47 CVEs
 before 3.4.16-0+deb11u1, plus listed versions
3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1
3.4.16-0+deb11u1
wireshark
Debian:12
From an advisory covering 14 CVEs
 before 4.0.6-1~deb12u1, plus listed versions
4.0.3-14.0.5-1~exp1
4.0.6-1~deb12u1
wireshark
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 3.6.11-3.oe2203
3.6.11-3.oe2203
Show 25 moreShow less
Affected packages
PackageAffectedFixed
wireshark
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 3.6.11-3.oe2203sp1
3.6.11-3.oe2203sp1
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 3.6.13-150000.3.89.1
3.6.13-150000.3.89.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 4.0.5-1.1
4.0.5-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-1993 is a medium vulnerability (CVSS 6.3) in Wireshark, published April 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.09%, the 90th percentile. Fixed in wireshark 4.0.6-1~deb12u1.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open