CVE-2024-4854 in Wireshark

Riassunto

di MITRE • 14/05/2024

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 14/05/2024
• Divulgazione: 14/05/2024
• Moderazione: accettato
• Voce: VDB-264050
• CPE: pronto
• CWE: CWE-835 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00811
• KEV: no
• Attività: molto basso
• Settore: Police, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-4854
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-4854
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-4854/