wnpa-sec-2023-06 · Multiple dissector excessive loops
Name: Multiple dissector excessive loops
Date: January 18, 2023
Affected versions: 4.0.0 to 4.0.2, 3.6.0 to 3.6.10
Fixed versions: 4.0.3, 3.6.11
Wireshark issue 18711.
Wireshark issue 18720.
Wireshark issue 18737.
The BPv6, NCP, and RTPS dissectors could loop excessively.
It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Upgrade to Wireshark 4.0.3, 3.6.11 or later.