CVE-2023-6175

A heap-based buffer overflow was found in Wireshark's NetScreen file parser. This issue may allow local arbitrary code execution via a crafted capture file.

Although arbitrary code execution may be possible, default memory protections in Red Hat Enterprise Linux should prevent this flaw from causing a higher impact than an application crash.

Wireshark is not an application that runs with elevated privileges, limiting the exploitability and impact of this issue to the user's context. Therefore, the severity score is set to Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.