CVE-2023-3648

Summary

CVE-2023-3648 is a denial-of-service vulnerability affecting Wireshark versions 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14. The issue lies in the Kafka dissector, which can be exploited through packet injection or crafted capture files. Successful exploitation results in a crash, rendering Wireshark unable to process network traffic, thereby causing a denial of service. Network administrators are advised to update their Wireshark installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.