CVE-2023-0668 - CVE House
Back to Database
Status published Unknown CVE-2023-0668

Wireshark IEEE-C37.118 parsing buffer overflow

Vulnerability Description

Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0668

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • zenofex
  • WanderingGlitch
  • Austin Hackers Anonymous!

References

More from Wireshark Foundation

View All →
CVE-2025-9817
NULL Pointer Dereference in Wireshark
High 7.8
CVE-2025-5601
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
High 7.8
CVE-2025-1492
Uncontrolled Recursion in Wireshark
High 7.8
CVE-2025-13946
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Medium 5.5
CVE-2025-13945
Improperly Controlled Sequential Memory Allocation in Wireshark
Medium 5.5

Affected Vendor

Wireshark Foundation

View all reports →

Affected Software

Wireshark
Vulnerable Versions:
4.0.0, 4.0.6, 3.6.0, 3.6.14

Timeline

Official Publish: June 7th, 2023
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-125

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1213 Data from Information Repositories
Collection
T1003 OS Credential Dumping
Credential Access
T1552 Unsecured Credentials
Credential Access