CVE-2024-2955
EUVD-2024-2789626.03.2024, 20:15
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture fileEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 4.2.4 < 𝑥 < 4.2.4 |
| wireshark | wireshark | 4.0.0 ≤ 𝑥 < 4.0.14 |
| wireshark | wireshark | 4.2.0 ≤ 𝑥 < 4.2.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-762 - Mismatched Memory Management RoutinesThe application attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.
- CWE-763 - Release of Invalid Pointer or ReferenceThe application attempts to return a memory resource to the system, but calls the wrong release function or calls the appropriate release function incorrectly.
References