Lucene search

K
mageiaGentoo FoundationMGASA-2024-0303
HistorySep 16, 2024 - 8:44 p.m.

Updated wireshark packages fix security vulnerability

2024-09-1620:44:44
Gentoo Foundation
advisories.mageia.org
2
wireshark
packages
ntlmssp
dissector
crash
vulnerability
security
fix
denial of service
packet injection
crafted capture file
cve-2024-8250
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.2.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file. (CVE-2024-8250)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchwireshark< 4.0.17-1wireshark-4.0.17-1.mga9

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low