CVE-2023-6174

wireshark: SSH dissector invalid read of memory blocks

Loading…

Severity

Low

Red Hat Product Security

4.3

CVSS 3.1

Review impact separately from score.

Published · November 15, 2023

Updated · November 22, 2025

Description

An invalid memory block read was found in Wireshark's SSH dissector. This issue may lead to an application crash and denial of service via packet injection or crafted capture file.

Statement

Default memory protections in Red Hat Enterprise Linux should prevent this issue from causing a higher impact than an application crash in the user context. Therefore, the severity of this flaw is low.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-125 · Out-of-bounds Read