CVE-2023-5371

Memory Allocation with Excessive Size Value in Wireshark

5.3 MediumFix available

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.51%Up 0.5 points since Oct 5, 2023

What each source reports

CVE List Score used 5.3

Memory Allocation with Excessive Size Value in Wireshark

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-5371
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-789
Updated: 2026-11-02

EUVDEUVD-2023-57687 5.3

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: EUVD-2023-57687
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j7xf-pgw2-75mr 5.3

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of...

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: GHSA-j7xf-pgw2-75mr
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-770, CWE-789
Updated: 2026-11-02

NVD 5.3

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-5371
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-789, CWE-770
Updated: 2026-11-02

OSVALPINE-CVE-2023-5371 6.5

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: ALPINE-CVE-2023-5371
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVAZL-31120 6.5

CVE-2023-5371 affecting package wireshark 4.0.8-1

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: AZL-31120
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 11 moreShow less

OSVAZL-37056 6.5

CVE-2023-5371 affecting package wireshark for versions less than 4.4.7-1

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: AZL-37056
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.3

Memory Allocation with Excessive Size Value in Wireshark

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: CVE-2023-5371
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-789
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-5371 6.5

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: DEBIAN-CVE-2023-5371
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1706 5.3

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file(CVE-2023-5371)

Record: OESA-2023-1706
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-5371 5.3

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file

Record: UBUNTU-CVE-2023-5371
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVCLSA-2026-1786619933 No score

wireshark: Fix of CVE-2023-5371

CVE-2023-5371: reject RTPS offset additions that move the offset backwards to prevent an excessive dissection loop

Record: CLSA-2026-1786619933
Updated: 2026-11-02

OSVCLSA-2026-1786718192 No score

wireshark: Fix of 2 CVEs

CVE-2023-5371: RTPS dissector: reject offset additions that move the offset backwards to prevent an excessive dissection loop

Record: CLSA-2026-1786718192
Updated: 2026-11-02

OSVMGASA-2024-0045 No score

Updated wireshark packages fix security vulnerabilities

The updated packages fix security vulnerabilities: RTPS dissector memory leak. (CVE-2023-5371) SSH dissector invalid read of memory blocks. (CVE-2023-6174) NetScreen File Parsing Heap-based Buffer Overflow. (CVE-2023-6175) GVCP dissector crash via packet injection or crafted capture file. (CVE-2024-0208)

Record: MGASA-2024-0045
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13310-1 No score

libwireshark16-4.0.10-1.1 on GA media

These are all security issues fixed in the libwireshark16-4.0.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13310-1
Updated: 2026-11-02

OSVSUSE-SU-2023:4083-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Updated to version 3.6.17:

CVE-2023-5371: Fixed a memory leak issue in the RTPS dissector (bsc#1215959).

Record: SUSE-SU-2023:4083-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3165-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):

Security issues fixed with this update:
- CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
- CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
- CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
- CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
- CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
- CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
- CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
- CVE-2023-2854: BLF file parser crash (bsc#1211708)
- CVE-2023-0666: RTPS dissector crash (bsc#1211709)
- CVE-2023-0414: EAP dissector crash (bsc#1207666)
Major changes introduced with versions 4.2.0 and 4.0.0:
- Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html
Added an aditional desktopfile to start wireshark which asks for the super user password.

Record: SUSE-SU-2024:3165-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Alpine:v3.18	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.19	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.20	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.21	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.22	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.23	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Alpine:v3.24	3.6.0 up to 4.0.10-r0	4.0.10-r0
`wireshark` Azure Linux:2	through 4.0.8-1	None known
`wireshark` Azure Linux:3	before 4.4.7-1	4.4.7-1
`wireshark` TuxCare:AlmaLinux:9.6	before 1:3.4.10-7.el9_6.tuxcare.els10	1:3.4.10-7.el9_6.tuxcare.els10

Show 25 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark-cli` TuxCare:AlmaLinux:9.6	before 1:3.4.10-7.el9_6.tuxcare.els10	1:3.4.10-7.el9_6.tuxcare.els10
`wireshark-devel` TuxCare:AlmaLinux:9.6	before 1:3.4.10-7.el9_6.tuxcare.els10	1:3.4.10-7.el9_6.tuxcare.els10
`wireshark` TuxCare:AlmaLinux:9.2	before 1:3.4.10-4.el9_2.tuxcare.els14	1:3.4.10-4.el9_2.tuxcare.els14
`wireshark-cli` TuxCare:AlmaLinux:9.2	before 1:3.4.10-4.el9_2.tuxcare.els14	1:3.4.10-4.el9_2.tuxcare.els14
`wireshark-devel` TuxCare:AlmaLinux:9.2	before 1:3.4.10-4.el9_2.tuxcare.els14	1:3.4.10-4.el9_2.tuxcare.els14
`wireshark` Debian:12	before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1	4.0.11-1~deb12u1
`wireshark` Debian:13	before 4.0.10-1	4.0.10-1
`wireshark` Debian:14	before 4.0.10-1	4.0.10-1
`wireshark` Debian:12 From an advisory covering 9 CVEs	before 4.0.11-1~deb12u1, plus listed versions 4.0.10-14.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1	4.0.11-1~deb12u1
`wireshark` Mageia:9 From an advisory covering 4 CVEs	before 4.0.12-1.mga9	4.0.12-1.mga9
`wireshark` openEuler:20.03-LTS-SP1	before 3.6.14-4.oe1	3.6.14-4.oe1
`wireshark` openEuler:20.03-LTS-SP3	before 3.6.14-4.oe1	3.6.14-4.oe1
`wireshark` openEuler:22.03-LTS	before 3.6.14-4.oe2203sp2	3.6.14-4.oe2203sp2
`wireshark` openEuler:22.03-LTS-SP1	before 3.6.14-4.oe2203sp1	3.6.14-4.oe2203sp1
`wireshark` openEuler:22.03-LTS-SP2	before 3.6.14-4.oe2203sp2	3.6.14-4.oe2203sp2
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP4	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP4	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP5	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Manager Proxy 4.2	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Manager Server 4.2	before 3.6.17-150000.3.103.1	3.6.17-150000.3.103.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` openSUSE:Leap 15.6 From an advisory covering 11 CVEs	before 4.2.6-150600.18.6.1	4.2.6-150600.18.6.1
`wireshark` openSUSE:Tumbleweed	before 4.0.10-1.1	4.0.10-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5371 is a medium vulnerability (CVSS 5.3) in Wireshark, published October 4, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in wireshark 4.0.10-r0.

References

Show 36 moreShow less