CVE-2024-0209

Details

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Affected Packages

Wireshark

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Fixed in:

3.6.204.0.124.2.1

References

WEB

https://gitlab.com/wireshark/wireshark/-/issues/19501

WEB

https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-0209

WEB

https://www.wireshark.org/security/wnpa-sec-2024-02.html