ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
History

Thu, 17 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-909
CPEs cpe:2.3:a:wireshark:wireshark:4.4.0:*:*:*:*:*:*:*

Thu, 10 Oct 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Vendors & Products Wireshark
Wireshark wireshark
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 10 Oct 2024 13:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

threat_severity

Important


Thu, 10 Oct 2024 06:45:00 +0000

Type Values Removed Values Added
Description ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Title Missing Initialization of a Variable in Wireshark
Weaknesses CWE-456
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2024-10-10T06:30:49.710Z

Updated: 2024-10-10T14:39:44.522Z

Reserved: 2024-10-10T06:30:39.935Z

Link: CVE-2024-9780

cve-icon Vulnrichment

Updated: 2024-10-10T14:39:38.581Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-10T07:15:03.727

Modified: 2024-10-17T14:18:18.433

Link: CVE-2024-9780

cve-icon Redhat

Severity : Important

Publid Date: 2024-10-10T06:30:49Z

Links: CVE-2024-9780 - Bugzilla