Lucene search

[email protected]NVD:CVE-2024-8250

HistoryAug 29, 2024 - 12:15 a.m.

CVE-2024-8250

2024-08-2900:15:09

CWE-825

CWE-787

[email protected]

web.nvd.nist.gov

cve-2024-8250

wireshark

denial of service

packet injection

crafted capture file

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

13.3%

JSON

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Affected configurations

Nvd

Node

wiresharkwiresharkRange4.0.0–4.0.17

wiresharkwiresharkRange4.2.0–4.2.7

VendorProductVersionCPE
wiresharkwireshark*cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wireshark	wireshark	*	cpe:2.3:a:wireshark:wireshark::::::::

References

gitlab.com/wireshark/wireshark/-/issues/19943

www.wireshark.org/security/wnpa-sec-2024-11.html

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

13.3%

JSON

Related for NVD:CVE-2024-8250

alpinelinux1 openvas6 fedora2 nessus9 vulnrichment1 cvelist1 debiancve1 cve1 redhatcve1 mageia1 osv3 photon2