CVE-2023-0666 - CVE House
Back to Database
Status published Unknown CVE-2023-0666

Wireshark RTPS Parsing Buffer Overflow

Vulnerability Description

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0666

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Austin Hackers Anonymous!
  • Austin Hackers Anonymous!

References

More from Wireshark Foundation

View All →
CVE-2025-9817
NULL Pointer Dereference in Wireshark
High 7.8
CVE-2025-5601
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
High 7.8
CVE-2025-1492
Uncontrolled Recursion in Wireshark
High 7.8
CVE-2025-13946
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Medium 5.5
CVE-2025-13945
Improperly Controlled Sequential Memory Allocation in Wireshark
Medium 5.5

Affected Vendor

Wireshark Foundation

View all reports →

Affected Software

Wireshark
Vulnerable Versions:
4.0.0, 4.0.6

Timeline

Official Publish: June 7th, 2023
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-122

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion