{
  "cveId": "CVE-2023-2854",
  "url": "https://patchblox.com/security/cve/CVE-2023-2854",
  "summary": "CVE-2023-2854 is fixed in 5 products on 1 platform, first by DEBIAN-CVE-2023-2854, released May 26, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "wireshark: This update for wireshark fixes the following issues:\n\nwireshark was updated from version 3.6.23 to version 4.2.6 (js...",
  "description": "This update for wireshark fixes the following issues:\n\nwireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):\n\n- Security issues fixed with this update:\n\n  * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)\n  * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)\n  * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)\n  * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)\n  * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)\n  * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)\n  * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)\n  * CVE-2023-2854: BLF file parser crash (bsc#1211708)\n  * CVE-2023-0666: RTPS dissector crash (bsc#1211709)\n  * CVE-2023-0414: EAP dissector crash (bsc#1207666)\n\n- Major changes introduced with versions 4.2.0 and 4.0.0:\n\n  * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html\n  * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html\n\n- Added an aditional desktopfile to start wireshark which asks for\n  the super user password.",
  "published": "2023-05-26T21:15:17Z",
  "severity": "medium",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
  "epss": 0.00875,
  "epssPercentile": 0.59194,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "4.0.6-1~deb12u1",
      "fix": "DEBIAN-CVE-2023-2854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2854",
      "released": "2023-05-26T21:15:17Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.0.6-1",
      "fix": "DEBIAN-CVE-2023-2854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2854",
      "released": "2023-05-26T21:15:17Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 14",
      "fixedVersion": "4.0.6-1",
      "fix": "DEBIAN-CVE-2023-2854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2854",
      "released": "2023-05-26T21:15:17Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "4.2.6-150600.18.6.1",
      "fix": "SUSE-SU-2024:3165-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3165-1",
      "released": "2024-09-09T07:25:24Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "sles 15.6",
      "fixedVersion": "4.2.6-150600.18.6.1",
      "fix": "SUSE-SU-2024:3165-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3165-1",
      "released": "2024-09-09T07:25:24Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-cli",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2023-197",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-197",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-cli-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2023-197",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-197",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2023-197",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-197",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2023-197",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-197",
      "released": "2023-06-05T16:39:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}