CVE-2023-0666

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.0.5 and prior

Description The issue is due to a failure in validating the length provided by an attacker-crafted RTPS packet, making Wireshark susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Recommendations For Wireshark versions 4.0.5 and prior, update to a version that includes the fix for this issue to prevent potential code execution. As a temporary workaround, consider disabling the handling of RTPS packets in Wireshark until a patch is available.