CVE-2023-1994

Description

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file

Affected Platforms

Weakness Type

CWE-400, CWE-476

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1994.json
• https://gitlab.com/wireshark/wireshark/-/issues/18947
• https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…