GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
References
Configurations
Configuration 1 (hide)
|
History
01 Mar 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
11 Feb 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Feb 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Jan 2024, 19:19
Type | Values Removed | Values Added |
---|---|---|
First Time |
Wireshark
Wireshark wireshark |
|
References | () https://gitlab.com/wireshark/wireshark/-/issues/19496 - Exploit, Issue Tracking, Vendor Advisory | |
References | () https://www.wireshark.org/security/wnpa-sec-2024-01.html - Issue Tracking, Vendor Advisory | |
CPE | cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
03 Jan 2024, 13:48
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
03 Jan 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-03 08:15
Updated : 2024-03-01 02:15
NVD link : CVE-2024-0208
Mitre link : CVE-2024-0208
CVE.ORG link : CVE-2024-0208
JSON object : View
Products Affected
wireshark
- wireshark
CWE
CWE-674
Uncontrolled Recursion