DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
References
Link | Resource |
---|---|
https://gitlab.com/wireshark/wireshark/-/issues/19557 | Exploit Issue Tracking Vendor Advisory |
https://www.wireshark.org/security/wnpa-sec-2024-05.html | Issue Tracking Vendor Advisory |
Configurations
History
08 Oct 2024, 18:57
Type | Values Removed | Values Added |
---|---|---|
CWE |
03 Oct 2024, 07:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-835 |
10 Jan 2024, 14:11
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-674 | |
First Time |
Wireshark wireshark
Wireshark |
|
CPE | cpe:2.3:a:wireshark:wireshark:4.2.0:*:*:*:*:*:*:* | |
References | () https://gitlab.com/wireshark/wireshark/-/issues/19557 - Exploit, Issue Tracking, Vendor Advisory | |
References | () https://www.wireshark.org/security/wnpa-sec-2024-05.html - Issue Tracking, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
03 Jan 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-03 08:15
Updated : 2024-10-08 18:57
NVD link : CVE-2024-0211
Mitre link : CVE-2024-0211
CVE.ORG link : CVE-2024-0211
JSON object : View
Products Affected
wireshark
- wireshark
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')