{"schemaVersion":3,"id":"CVE-2023-5371","aliases":["SUSE-SU-2023:4083-1","UBUNTU-CVE-2023-5371","DEBIAN-CVE-2023-5371","openSUSE-SU-2024:13310-1"],"status":"published","duplicateOf":null,"title":null,"description":"RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file","dates":{"published":"2023-10-04T16:01:48.187Z","modified":"2026-03-27T13:56:56.112Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00513,"percentile":0.42427,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.027999999999999987,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00485},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00513,"percentile":0.42427}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00485,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00513,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00513,"percentile":0.42427}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_E00FBD4E26722476","name":"Exploit Reference (gitlab.com)","source":"reference","url":"https://gitlab.com/wireshark/wireshark/-/issues/19322","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-789","name":"Memory Allocation with Excessive Size Value","description":"The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/789.html"},{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"debian","product":"wireshark","name":"wireshark","label":"wireshark","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/wireshark","purlType":"deb","versions":[{"text":"< 4.0.11-1~deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.10-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.11-1~deb12u1 | < 4.0.10-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"wireshark","name":"wireshark","label":"wireshark","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/wireshark","purlType":"deb","versions":[{"text":"< 4.2.2-1.1build3","noFixRecorded":false,"fixedIn":null},{"text":"< 4.4.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-1.1build3 | < 4.4.5-1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"wireshark&distro=openSUSE Tumbleweed","name":"wireshark","label":"wireshark&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/wireshark&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 4.0.10-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.10-1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"wireshark","label":"wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","name":"wireshark","label":"wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4","name":"wireshark","label":"wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP5","name":"wireshark","label":"wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Manager Proxy 4.2","name":"wireshark","label":"wireshark&distro=SUSE Manager Proxy 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Manager Proxy 4.2","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wireshark&distro=SUSE Manager Server 4.2","name":"wireshark","label":"wireshark&distro=SUSE Manager Server 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wireshark&distro=SUSE Manager Server 4.2","purlType":"rpm","versions":[{"text":"< 3.6.17-150000.3.103.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.17-150000.3.103.1","eol":null,"hubHref":null},{"vendor":"wireshark foundation","product":"wireshark","name":"Wireshark","label":"wireshark","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.0.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.6.0, < 3.6.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.0.9 | ≥ 3.6.0, < 3.6.17","eol":null,"hubHref":"/vendor/wireshark_foundation/wireshark"},{"vendor":"wireshark","product":"wireshark","name":"wireshark","label":"wireshark","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.6.0, < 3.6.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.0.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.6.0, < 3.6.17 | ≥ 4.0.0, < 4.0.9","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"wireshark","label":"Wireshark","category":"app"}},"hubHref":"/vendor/wireshark/wireshark"}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2023-27.html","label":"www.wireshark.org/security/wnpa-sec-2023-27.html","hostname":"www.wireshark.org","tags":["REPORT","Vendor Advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19322","label":"gitlab.com/wireshark/wireshark/-/issues/19322","hostname":"gitlab.com","tags":["Issue Tracking","REPORT","Exploit","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-09","label":"security.gentoo.org/glsa/202402-09","hostname":"security.gentoo.org","tags":["X Transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/34DBP5P2RHQ7XUABPANYYMOGV5KS6VEP/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["X Transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MADSCHKZSCKQ5NLIX3UMOIJD2JZ65L4V/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["X Transferred"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234083-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20234083-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1215959","label":"bugzilla.suse.com/1215959","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5371","label":"www.suse.com/security/cve/CVE-2023-5371","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2023-5371","label":"ubuntu.com/security/CVE-2023-5371","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5371","label":"www.cve.org/CVERecord?id=CVE-2023-5371","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5371","label":"security-tracker.debian.org/tracker/CVE-2023-5371","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5371","label":"nvd.nist.gov/vuln/detail/CVE-2023-5371","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-5559-1","MGASA-2024-0045","SUSE-SU-2024:3165-1"],"duplicates":[],"related":["SUSE-SU-2024:3165-1"]},"timeline":[{"kind":"published","date":"2023-10-04T16:01:48.187Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-27T13:56:56.112Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:13:13.131Z","stale":false,"partial":false}}