T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
Fixes

Solution

Upgrade to versions 4.2.4 or above.


Workaround

No workaround given by the vendor.

History

Wed, 06 Aug 2025 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Fedoraproject
Fedoraproject fedora
Weaknesses CWE-763
CPEs cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Vendors & Products Fedoraproject
Fedoraproject fedora

Thu, 10 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Vendors & Products Wireshark
Wireshark wireshark
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2025-04-10T20:07:56.097Z

Reserved: 2024-03-26T19:02:07.653Z

Link: CVE-2024-2955

cve-icon Vulnrichment

Updated: 2024-08-01T19:32:42.453Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-26T20:15:11.710

Modified: 2025-08-06T14:52:35.227

Link: CVE-2024-2955

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-03-26T00:00:00Z

Links: CVE-2024-2955 - Bugzilla

cve-icon OpenCVE Enrichment

No data.