CVE-2023-1993

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.12 Wireshark versions 4.0.0 through 4.0.4

Description The issue is related to a large loop in the LISP dissector of Wireshark, which can lead to a denial of service via packet injection or crafted capture file. This can be exploited by a remote attacker to cause a service disruption.

Recommendations For Wireshark versions 3.6.0 through 3.6.12, update to a version that fixes this issue. For Wireshark versions 4.0.0 through 4.0.4, update to a version that fixes this issue. As a temporary workaround, consider disabling the LISP dissector until a patch is available.