CVE-2023-2906: Wireshark

Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

Affected products

• Wireshark Wireshark: from 2.0.0, up to and including 4.0.7

Published 2023-08-25. Last modified 2026-06-17.