{"id":"CVE-2023-1993","aliases":["CLSA-2026-1786479348","DEBIAN-CVE-2023-1993","DLA-3402-1","DLA-3906-1","DSA-5429-1","EUVD-2023-24173","GHSA-h4rg-h5cx-4r4w","OESA-2023-1260","OESA-2023-1261","SUSE-SU-2023:1931-1","UBUNTU-CVE-2023-1993","openSUSE-SU-2024:12865-1"],"status":"published","title":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.04095,"percentile":0.90816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-834"],"published":"2023-04-12T00:00:00Z","modified":"2026-10-28T02:30:58Z","fixes":[{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["4.0.6-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["4.0.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["4.0.6-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"bundled":26},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"bundled":26},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"bundled":26},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1~deb12u1"}]}],"versions":["4.0.3-1","4.0.5-1~exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.20-0+deb10u6"}]}],"versions":["2.6.10-1","2.6.20-0+deb10u1","2.6.20-0+deb10u2","2.6.20-0+deb10u3","2.6.20-0+deb10u4","2.6.20-0+deb10u5","2.6.8-1.1","2.6.9-1"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.16-0+deb11u1"}]}],"versions":["3.4.10-0+deb11u1","3.4.4-1","3.4.6-1~exp1","3.4.7-1","3.4.7-1~exp1","3.4.8-1","3.4.9-1"],"bundled":47},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1~deb12u1"}]}],"versions":["4.0.3-1","4.0.5-1~exp1"],"bundled":14},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.11-3.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.11-3.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-150000.3.89.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1","3.2.3-1ubuntu0.1~esm1","3.2.3-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.7-1~exp1","3.4.9-1","3.6.2-1ubuntu1","3.6.2-2","3.6.2-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-1.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"wireshark","product":"wireshark"},{"vendor":"wireshark foundation","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2023-10.html","tags":["x_transferred","Vendor Advisory","web","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/18900","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1993.json","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2023/dsa-5429","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-02","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1993","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3"},{"url":"https://github.com/advisories/GHSA-h4rg-h5cx-4r4w"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786479348.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4855","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6870","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1993.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-1993","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1992","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1261","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231931-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210403","tags":["report"]},{"url":"https://bugzilla.suse.com/1210404","tags":["report"]},{"url":"https://bugzilla.suse.com/1210405","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1994","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-1993","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1993","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-1993","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T00:00:00Z","modified":"2025-11-03T21:47:09.557Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-834"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-24173","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T00:00:00Z","modified":"2025-11-03T21:47:09Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-h4rg-h5cx-4r4w","title":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T21:30:19Z","modified":"2025-11-04T00:30:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-834"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"nvd":[{"id":"CVE-2023-1993","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T21:15:16.183Z","modified":"2026-06-17T05:29:13.203Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-834"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"CVE-2023-1993","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T00:00:00Z","modified":"2026-10-28T02:30:58.599647493Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-1993","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T21:15:16.183Z","modified":"2026-10-26T18:00:25.619176366Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1260","title":"wireshark security update","description":"Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.\n\r\n\r\nSecurity Fix(es):\r\n\r\nLISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1993)\r\n\r\nRPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1992)\r\n\r\nGQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1994)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:40.163264936Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1261","title":"wireshark security update","description":"Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.\n\r\n\r\nSecurity Fix(es):\r\n\r\nLISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1993)\r\n\r\nRPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1992)\r\n\r\nGQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file(CVE-2023-1994)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:40.267742227Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2023-1993","description":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2023-04-12T21:15:00Z","modified":"2026-04-22T14:00:24.90884Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"CLSA-2026-1786479348","title":"wireshark: Fix of 26 CVEs","description":"- Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the\n  increment/decrement_dissection_depth() API, a prerequisite for the\n  recursion-depth fixes below (3.4.10 has no such API)\n- CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference\n- CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds\n- CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption\n  secrets after it has been freed\n- CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE\n- CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte\n- CVE-2023-1993: LISP dissector: do not read past the LCAF payload length\n- CVE-2026-6867: SMB2 dissector: put bounds on total chained compression\n- CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length\n- CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries\n  count at MAX_EDCH_DDIS\n- CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places\n- CVE-2026-6534: USB HID dissector: skip items with a report size of zero\n- CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU\n  type case\n- CVE-2026-5404: K12 reader: fix a possible stack overflow when writing\n- CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the\n  multiframe case\n- CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose\n  total size is not fcount * plen\n- CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state\n- CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression\n- CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks\n  so a crafted message cannot drive an infinite loop\n- CVE-2026-6526: HTTP dissector: check the strstr() results before\n  dereferencing them\n- CVE-2026-6532: kismet dissector: fix a heap buffer overflow\n- CVE-2026-5401: AFP Spotlight dissector: add recursion checks\n- CVE-2026-5406: fcswils dissector: add recursion checks\n- CVE-2026-5408: BT DHT dissector: add recursion checks\n- CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks\n- CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types\n  as potentially cyclic and add recursion checks\n- CVE-2026-6535: epan: fix potential overflows in zlib decompression","status":"published","published":"2026-08-11T20:16:23Z","modified":"2026-10-26T09:43:28.414107852Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-3402-1","title":"wireshark - security update","status":"published","published":"2023-04-29T00:00:00Z","modified":"2026-03-09T01:20:15.231878Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3906-1","title":"wireshark - security update","status":"published","published":"2024-09-30T00:00:00Z","modified":"2026-03-09T02:11:11.067392Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5429-1","title":"wireshark - security update","status":"published","published":"2023-06-15T00:00:00Z","modified":"2026-03-09T02:08:31.033486Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12865-1","title":"libwireshark16-4.0.5-1.1 on GA media","description":"These are all security issues fixed in the libwireshark16-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:51.309595Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:1931-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n \n- CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405).\n- CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404).\n- CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403).\n  \nUpdate to 3.6.13:\n\n- Further features, bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html\n","status":"published","published":"2023-04-20T14:16:12Z","modified":"2026-02-04T04:40:52.07023Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}