{"id":"CVE-2023-2906","state":"PUBLISHED","title":"Wireshark CP2179 divide by zero","description":"Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.","publishedAt":"2023-08-25T20:41:19.403Z","updatedAt":"2025-11-03T21:47:44.937Z","severity":null,"assigner":"AHA","products":["Wireshark Foundation Wireshark"],"affected":[{"vendor":"Wireshark Foundation","product":"Wireshark","defaultStatus":"unaffected","versions":[{"version":"2.0.0","status":"affected","lessThanOrEqual":"4.0.7","versionType":"semver"}]}],"references":["https://takeonme.org/cves/CVE-2023-2906.html","https://gitlab.com/wireshark/wireshark/-/issues/19229","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/","https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"],"weaknesses":["CWE-369"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/2xxx/CVE-2023-2906.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-2906","state":"PUBLISHED","datePublished":"2023-08-25T20:41:19.403Z","dateUpdated":"2025-11-03T21:47:44.937Z","assignerShortName":"AHA","assignerOrgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","dateReserved":"2023-05-26T00:46:14.391Z"},"containers":{"cna":{"title":"Wireshark CP2179 divide by zero","descriptions":[{"lang":"en","value":"Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack."}],"affected":[{"vendor":"Wireshark Foundation","product":"Wireshark","defaultStatus":"unaffected","versions":[{"version":"2.0.0","status":"affected","lessThanOrEqual":"4.0.7","versionType":"semver"}]}],"references":[{"url":"https://takeonme.org/cves/CVE-2023-2906.html","tags":["exploit","third-party-advisory","technical-description"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19229","tags":["patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-369","description":"CWE-369 Divide By Zero","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"AHA","orgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","dateUpdated":"2023-09-15T21:06:18.829Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"zenofex"},{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"WanderingGlitch"},{"lang":"en","type":"coordinator","user":"00000000-0000-4000-9000-000000000000","value":"AHA!"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://takeonme.org/cves/CVE-2023-2906.html","tags":["exploit","third-party-advisory","technical-description","x_transferred"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19229","tags":["patch","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T21:47:44.937Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-02T14:36:28.624729Z","id":"CVE-2023-2906","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-02T14:37:16.471Z"}}]}}}