Lucene search
+L

540 matches found

NVD
NVD
•added 2024/05/14 3:45 p.m.•22 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00811EPSS
SaveExploits0References7
osv_azl
osv_azl
•added 2024/05/14 3:45 p.m.•18 views

AZL-42518 CVE-2024-4854 affecting package wireshark 4.0.8-1

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00811EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/05/14 3:45 p.m.•31 views

AZL-42564 CVE-2024-4854 affecting package wireshark for versions less than 4.4.7-1

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.00811EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/05/14 3:45 p.m.•15 views

UBUNTU-CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.00811EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/05/14 12:03 a.m.•22 views

CVE-2024-4854 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

6.4CVSS6.7AI score
SaveExploits0References9
Debian CVE
Debian CVE
•added 2024/05/14 12:03 a.m.•31 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS7.6AI score0.00811EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/05/14 12:03 a.m.•34 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS6.7AI score0.00811EPSS
SaveExploits0
Mend
Mend
•added 2024/05/14 12:03 a.m.•8 views

CVE-2024-4854

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS0.00811EPSS
SaveExploits0References10
CVE
CVE
•added 2024/05/14 12:03 a.m.•120 views

CVE-2024-4854

CVE-2024-4854 – Wireshark dissector infinite loop Affected: Wireshark versions 3.6.0–3.6.22, 4.0.0–4.0.14, and 4.2.0–4.2.4, where the MONGO and ZigBee TLV dissectors can enter infinite loops. This can enable a denial-of-service via crafted capture files or packet injection. Multiple connected adv...

7.5CVSS6.5AI score0.00811EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•8 views

PT-2024-3767

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.4 Wireshark versions 4.0.0 through 4.0.14 Wireshark versions 3.6.0 through 3.6.22 Description The issue is related to infinite loops in the MONGO and ZigBee TLV dissectors, which can cause a denial of...

7.5CVSS5.9AI score0.00811EPSS
SaveExploits1References47
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•7 views

CVE-2024-4854: Loop with Unreachable Exit Condition

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...

7.5CVSS5.8AI score0.00811EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/05 5:39 p.m.•25 views

CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number...

7.5CVSS6.8AI score0.00351EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/05 5:39 p.m.•46 views

CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number...

7.5CVSS7.6AI score0.00351EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/01/13 7:19 a.m.•32 views

Uncontrolled Recursion (Denial Of Service)

Zigbee TLV in Wireshark 4.2.0 is vulnerable to Uncontrolled Recursion. The vulnerability is due to packet injection or crafted capture file resulting in denial of service...

7.8CVSS6.9AI score0.00466EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2024/01/09 12:00 a.m.•27 views

Unspecified Vulnerability in Wireshark (CNVD-2024-05635)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a Zigbee TLV parser crash that...

7.8CVSS6.9AI score0.00466EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/01/04 2:33 a.m.•15 views

SUSE CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.3AI score0.00466EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2024/01/03 8:15 a.m.•2 views

DEBIAN-CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00466EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/03 8:15 a.m.•30 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.00466EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/01/03 8:15 a.m.•11 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00466EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2024/01/03 8:15 a.m.•21 views

Design/Logic Flaw

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00466EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder