vulnerability

Red Hat: CVE-2023-2952: wireshark: XRA dissector infinite loop (Multiple Advisories)

Name: Red Hat: CVE-2023-2952: wireshark: XRA dissector infinite loop (Multiple Advisories)
Creator: Red Hat
Published: 2023-05-30T00:00:00.000Z
Keywords: CVE, CWE-835, Red Hat, 2023, 2952, wireshark, redhat-upgrade-wireshark, redhat-upgrade-wireshark-cli, redhat-upgrade-wireshark-cli-debuginfo, redhat-upgrade-wireshark-debuginfo, redhat-upgrade-wireshark-debugsource, redhat-upgrade-wireshark-devel, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:C)

Published

May 30, 2023

Added

Nov 8, 2023

Modified

Mar 27, 2026

Description

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

Solutions

redhat-upgrade-wiresharkredhat-upgrade-wireshark-cliredhat-upgrade-wireshark-cli-debuginforedhat-upgrade-wireshark-debuginforedhat-upgrade-wireshark-debugsourceredhat-upgrade-wireshark-devel

References

CWE-835
EUVD-EUVD-2023-34398
NVD-CVE-2023-2952
REDHAT-RHSA-2023:6469
REDHAT-RHSA-2023:7015
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34398

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report