CVE-2024-4854
EUVD-2024-4443214.05.2024, 15:45
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 3.6.0 ≤ 𝑥 ≤ 3.6.22 |
| wireshark | wireshark | 4.0.0 ≤ 𝑥 ≤ 4.0.14 |
| wireshark | wireshark | 4.2.0 ≤ 𝑥 ≤ 4.2.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libwireshark15 |
| ||||||||||||||||||||
| libwireshark17 |
| ||||||||||||||||||||
| libwiretap12 |
| ||||||||||||||||||||
| libwiretap14 |
| ||||||||||||||||||||
| libwsutil13 |
| ||||||||||||||||||||
| libwsutil15 |
| ||||||||||||||||||||
| wireshark |
| ||||||||||||||||||||
| wireshark-devel |
| ||||||||||||||||||||
| wireshark-ui-qt |
|
Common Weakness Enumeration
References