Lucene search
+L

539 matches found

OSV
OSV
•added 2024/05/14 3:45 p.m.•6 views

DEBIAN-CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.5AI score0.00811EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/14 3:45 p.m.•22 views

AZL-42564 CVE-2024-4854 affecting package wireshark for versions less than 4.4.7-1

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00811EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/14 3:45 p.m.•14 views

UBUNTU-CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.00811EPSS
SaveExploits0References6
Mend
Mend
•added 2024/05/14 12:03 a.m.•4 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS0.00811EPSS
SaveExploits0References10
CVE
CVE
•added 2024/05/14 12:03 a.m.•115 views

CVE-2024-4854

CVE-2024-4854 – Wireshark dissector infinite loop Affected: Wireshark versions 3.6.0–3.6.22, 4.0.0–4.0.14, and 4.2.0–4.2.4, where the MONGO and ZigBee TLV dissectors can enter infinite loops. This can enable a denial-of-service via crafted capture files or packet injection. Multiple connected adv...

7.5CVSS6.5AI score0.00811EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2024/05/14 12:03 a.m.•22 views

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

6.4CVSS6.7AI score
SaveExploits0References9
Debian CVE
Debian CVE
•added 2024/05/14 12:03 a.m.•31 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.6AI score0.00811EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/05/14 12:03 a.m.•34 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.7AI score0.00811EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•6 views

CVE-2024-4854: Loop with Unreachable Exit Condition

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS5.8AI score0.00811EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•6 views

PT-2024-3767

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.4 Wireshark versions 4.0.0 through 4.0.14 Wireshark versions 3.6.0 through 3.6.22 Description The issue is related to infinite loops in the MONGO and ZigBee TLV dissectors, which can cause a denial of...

7.5CVSS5.9AI score0.00811EPSS
SaveExploits1References47
Cvelist
Cvelist
•added 2024/02/05 5:39 p.m.•41 views

CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number...

7.5CVSS7.6AI score0.00351EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/05 5:39 p.m.•25 views

CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number...

7.5CVSS6.8AI score0.00351EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/01/13 7:19 a.m.•31 views

Uncontrolled Recursion (Denial Of Service)

Zigbee TLV in Wireshark 4.2.0 is vulnerable to Uncontrolled Recursion. The vulnerability is due to packet injection or crafted capture file resulting in denial of service...

7.8CVSS6.9AI score0.00466EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2024/01/09 12:00 a.m.•27 views

Unspecified Vulnerability in Wireshark (CNVD-2024-05635)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a Zigbee TLV parser crash that...

7.8CVSS6.9AI score0.00466EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/01/04 2:33 a.m.•13 views

SUSE CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.3AI score0.00466EPSS
SaveExploits1References4
NVD
NVD
•added 2024/01/03 8:15 a.m.•28 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.00466EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/01/03 8:15 a.m.•10 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00466EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/01/03 8:15 a.m.•2 views

DEBIAN-CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00466EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/03 8:15 a.m.•21 views

Design/Logic Flaw

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00466EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/01/03 8:15 a.m.•13 views

UBUNTU-CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS5.8AI score0.00466EPSS
SaveExploits1References3
Rows per page
Query Builder