Lucene search

PRIOn knowledge basePRION:CVE-2024-0208

HistoryJan 03, 2024 - 8:15 a.m.

Design/Logic Flaw

2024-01-0308:15:00

PRIOn knowledge base

www.prio-n.com

gvcp

dissector crash

wireshark

denial of service

packet injection

crafted capture file

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.0%

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CPENameOperatorVersion
wiresharkeq4.2.0
wiresharkge3.6.0
wiresharkle3.6.19
wiresharkge4.0.0
wiresharkle4.0.11

Name	Operator	Version
wireshark	eq	4.2.0
wireshark	ge	3.6.0
wireshark	le	3.6.19
wireshark	ge	4.0.0
wireshark	le	4.0.11

References

gitlab.com/wireshark/wireshark/-/issues/19496

lists.debian.org/debian-lts-announce/2024/02/msg00016.html

lists.fedoraproject.org/archives/list/[email protected]/message/34DBP5P2RHQ7XUABPANYYMOGV5KS6VEP/

lists.fedoraproject.org/archives/list/[email protected]/message/MADSCHKZSCKQ5NLIX3UMOIJD2JZ65L4V/

www.wireshark.org/security/wnpa-sec-2024-01.html