CVE-2023-3649

Buffer Over-read in Wireshark

5.3 MediumFix available

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.24%Up 0.2 points since Jul 14, 2023

What each source reports

CVE List Score used 5.3

Buffer Over-read in Wireshark

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-3649
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-126
Updated: 2026-11-02

EUVDEUVD-2023-44293 5.3

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: EUVD-2023-44293
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-cfcv-vwxf-fg7x 5.3

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection...

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: GHSA-cfcv-vwxf-fg7x
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-125, CWE-126
Updated: 2026-11-02

NVD 5.3

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-3649
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-126, CWE-125
Updated: 2026-11-02

OSV 5.3

Buffer Over-read in Wireshark

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-3649
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-126
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-3649 5.5

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: DEBIAN-CVE-2023-3649
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 4 moreShow less

OSVOESA-2023-1652 7.5

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. (CVE-2023-2906)

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file(CVE-2023-3649)

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file(CVE-2023-4511)

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file(CVE-2023-4513)

Record: OESA-2023-1652
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-3649 5.3

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Record: UBUNTU-CVE-2023-3649
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13067-1 No score

libwireshark16-4.0.7-2.1 on GA media

These are all security issues fixed in the libwireshark16-4.0.7-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13067-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3165-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):

Security issues fixed with this update:
- CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
- CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
- CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
- CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
- CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
- CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
- CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
- CVE-2023-2854: BLF file parser crash (bsc#1211708)
- CVE-2023-0666: RTPS dissector crash (bsc#1211709)
- CVE-2023-0414: EAP dissector crash (bsc#1207666)
Major changes introduced with versions 4.2.0 and 4.0.0:
- Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html
Added an aditional desktopfile to start wireshark which asks for the super user password.

Record: SUSE-SU-2024:3165-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1	4.0.11-1~deb12u1
`wireshark` Debian:13	before 4.0.7-1	4.0.7-1
`wireshark` Debian:14	before 4.0.7-1	4.0.7-1
`wireshark` Debian:11 From an advisory covering 47 CVEs	before 3.4.16-0+deb11u1, plus listed versions 3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1	3.4.16-0+deb11u1
`wireshark` Debian:12 From an advisory covering 9 CVEs	before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1	4.0.11-1~deb12u1
`wireshark` openEuler:20.03-LTS-SP1 From an advisory covering 4 CVEs	before 3.6.14-3.oe1	3.6.14-3.oe1
`wireshark` openEuler:20.03-LTS-SP3 From an advisory covering 4 CVEs	before 3.6.14-3.oe1	3.6.14-3.oe1
`wireshark` openEuler:22.03-LTS From an advisory covering 4 CVEs	before 3.6.14-3.oe2203sp2	3.6.14-3.oe2203sp2
`wireshark` openEuler:22.03-LTS-SP1 From an advisory covering 4 CVEs	before 3.6.14-3.oe2203sp1	3.6.14-3.oe2203sp1
`wireshark` openEuler:22.03-LTS-SP2 From an advisory covering 4 CVEs	before 3.6.14-3.oe2203sp2	3.6.14-3.oe2203sp2

Show 9 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` openSUSE:Leap 15.6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3	None known
`wireshark` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less 2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2	None known
`wireshark` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less 2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2	None known
`wireshark` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2	None known
`wireshark` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1	None known
`wireshark` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 4.0.7-2.1	4.0.7-2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-3649 is a medium vulnerability (CVSS 5.3) in Wireshark, published July 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in wireshark 4.0.11-1~deb12u1.

References

Show 31 moreShow less