CVE-2023-0667

Summary

CVE-2023-0667 is a newly identified vulnerability that affects Wireshark version 4.0.5 and older in specific configurations. The issue stems from a failure to validate the length of an MSMQ (Microsoft Message Queuing) packet, which enables attackers to craft malicious packets that trigger a heap-based buffer overflow. Successful exploitation of this flaw could potentially result in code execution, allowing an attacker to gain control of the Wireshark process. It is important to note that this vulnerability only affects Wireshark in unusual configurations and requires a specially crafted packet for exploitation. Users are strongly encouraged to update their Wireshark installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.