Lucene search

K
nvd[email protected]NVD:CVE-2024-4854
HistoryMay 14, 2024 - 3:45 p.m.

CVE-2024-4854

2024-05-1415:45:18
CWE-835
web.nvd.nist.gov
4
cve-2024-4854
mongo
zigbee
tlv
wireshark
denial of service
packet injection
crafted capture file

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

6.4

Confidence

High

EPSS

0

Percentile

16.3%

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

6.4

Confidence

High

EPSS

0

Percentile

16.3%