CVE-2023-0667

Name	CVE-2023-0667
Description	Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3906-1, DSA-5429-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
wireshark (PTS)	bullseye	3.4.10-0+deb11u1	vulnerable
	bullseye (security)	3.4.16-0+deb11u1	fixed
	bookworm	4.0.17-0+deb12u1	fixed
	bookworm (security)	4.0.11-1~deb12u1	fixed
	trixie	4.4.7-1	fixed
	forky, sid	4.6.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
wireshark	source	bullseye	3.4.16-0+deb11u1	DLA-3906-1
wireshark	source	bookworm	4.0.6-1~deb12u1	DSA-5429-1
wireshark	source	(unstable)	4.0.6-1

[buster] - wireshark <no-dsa> (Minor issue)
https://takeonme.org/cves/CVE-2023-0667.html
https://gitlab.com/wireshark/wireshark/-/issues/19086