CVE-2023-4511

Summary

CVE-2023-4511 is a denial-of-service vulnerability affecting Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15. The BT SDP dissector contains an infinite loop, which can be exploited through packet injection or crafted capture files. An attacker can take advantage of this issue to cause Wireshark to become unresponsive or crash, resulting in a denial-of-service condition. This vulnerability poses a risk to network security professionals and investigators who rely on Wireshark for network analysis and troubleshooting. Users are advised to upgrade to the latest version of Wireshark to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.