CVE-2023-4512
Uncontrolled Recursion in Wireshark
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Uncontrolled Recursion in Wireshark
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-4512- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-674
- Updated
- 2026-11-02
EUVDEUVD-2023-54367
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2023-54367- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g65w-25m5-5gcg
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or...
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
GHSA-g65w-25m5-5gcg- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-674
- Updated
- 2026-11-02
NVD
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-4512- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
OSV
Uncontrolled Recursion in Wireshark
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
CVE-2023-4512- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-674
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-4512
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2023-4512- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2023-4512
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2023-4512- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2023-0275 No score
Updated wireshark packages fix security vulnerabilities
The updated wireshark packages fix security vulnerabilities:
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. (CVE-2023-2906)
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file. (CVE-2023-4511)
CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file. (CVE-2023-4512)
BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file. (CVE-2023-4513)
- Record
MGASA-2023-0275- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13184-1 No score
libwireshark16-4.0.8-2.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.8-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13184-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3778-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
- Wireshark update to v3.6.16.
- CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. (bsc#1214561)
- CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop. (bsc#1214560)
- CVE-2023-4513: Fixed a bug in BT SDP dissector which could lead to a memory leak. (bsc#1214562)
- CVE-2023-2906: Fixed a bug in CP2179 dissector which could lead to crash. (bsc#1214652)
- Record
SUSE-SU-2023:3778-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1 |
4.0.11-1~deb12u1 |
wiresharkDebian:13 |
before 4.0.8-1 | 4.0.8-1 |
wiresharkDebian:14 |
before 4.0.8-1 | 4.0.8-1 |
wiresharkDebian:11 From an advisory covering 47 CVEs |
before 3.4.16-0+deb11u1, plus listed versions 3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.16-0+deb11u1 |
wiresharkDebian:12 From an advisory covering 9 CVEs |
before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1 |
4.0.11-1~deb12u1 |
wiresharkMageia:9 From an advisory covering 4 CVEs |
before 4.0.8-1.mga9 | 4.0.8-1.mga9 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkopenSUSE:Leap 15.5 From an advisory covering 4 CVEs |
before 3.6.16-150000.3.100.1 | 3.6.16-150000.3.100.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 4.0.8-2.1 | 4.0.8-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4512 is a medium vulnerability (CVSS 5.3) in Wireshark, published August 24, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 44th percentile. Fixed in wireshark 4.0.11-1~deb12u1.
References
wireshark.org/security/wnpa-sec-2023-23.html
gitlab.com/wireshark/wireshark/-/issues/19144
lists.fedoraproject.org/archives/list/[email protected]/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF
lists.debian.org/debian-lts-announce/2024/09/msg00049.html
Show 20 moreShow less
nvd.nist.gov/vuln/detail/CVE-2023-4512
github.com/advisories/GHSA-g65w-25m5-5gcg
security-tracker.debian.org/tracker/CVE-2023-4512
advisories.mageia.org/MGASA-2023-0275.html
bugs.mageia.org/show_bug.cgi?id=32275
cve.org/CVERecord?id=CVE-2023-2906
suse.com/support/update/announcement/2023/suse-su-20233778-1
bugzilla.suse.com/1214560
ubuntu.com/security/CVE-2023-4512