CVE-2023-0668

Summary

CVE-2023-0668 is a vulnerability affecting Wireshark version 4.0.5 and prior. The issue arises due to Wireshark's failure to validate the length of an attacker-crafted IEEE-C37.118 packet, leading to a heap-based buffer overflow. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the Wireshark process. This poses a significant risk, especially in environments where Wireshark is used to analyze network traffic. Users are advised to upgrade to the latest version of Wireshark or apply available workarounds to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.