CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file

CVSS v3 3.6 LOW

3.6^/10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://gitlab.com/wireshark/wireshark/-/issues/19782
https://gitlab.com/wireshark/wireshark/-/issues/19783
https://gitlab.com/wireshark/wireshark/-/issues/19784
https://www.wireshark.org/security/wnpa-sec-2024-08.html
https://gitlab.com/wireshark/wireshark/-/issues/19782
https://gitlab.com/wireshark/wireshark/-/issues/19783
https://gitlab.com/wireshark/wireshark/-/issues/19784
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/
https://www.wireshark.org/security/wnpa-sec-2024-08.html

Configurations

No configuration.

History

21 Nov 2024, 09:43

Type	Values Removed	Values Added
References		() https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ -
References	~~() https://gitlab.com/wireshark/wireshark/-/issues/19782 -~~	() https://gitlab.com/wireshark/wireshark/-/issues/19782 -
References	~~() https://gitlab.com/wireshark/wireshark/-/issues/19783 -~~	() https://gitlab.com/wireshark/wireshark/-/issues/19783 -
References	~~() https://gitlab.com/wireshark/wireshark/-/issues/19784 -~~	() https://gitlab.com/wireshark/wireshark/-/issues/19784 -
References	~~() https://www.wireshark.org/security/wnpa-sec-2024-08.html -~~	() https://www.wireshark.org/security/wnpa-sec-2024-08.html -

29 Aug 2024, 15:15

Type	Values Removed	Values Added
References	~~{'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/', 'source': 'cve@gitlab.com'}~~ ~~{'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/', 'source': 'cve@gitlab.com'}~~

10 Jun 2024, 18:15

Type	Values Removed	Values Added
References		() https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ -
Summary		(es) Un problema de Use after free en editcap podría causar denegación de servicio a través de un archivo de captura manipulado

14 May 2024, 15:45

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-14 15:45

Updated : 2024-11-21 09:43

NVD link : CVE-2024-4855

Mitre link : CVE-2024-4855

CVE.ORG link : CVE-2024-4855

JSON object : View

Products Affected

No product.

CWE

CWE-416

Use After Free

3.6 /10