Azure Linux 3.0 Security Update: wireshark (CVE-2024-4855)

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4855 advisory. - Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4855 Note...

CVE-2024-4855 affecting package wireshark for versions less than 4.4.7-1

CVE-2024-4855 affecting package wireshark for versions less than 4.4.7-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2024-4855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4855 Note that Nessus relies on the presence of the package as...

openSUSE Security Advisory (SUSE-SU-2024:1865-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2024-673)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-673 advisory. Memory handling issue in editcap could cause denial of service via crafted capture file CVE-2024-4853 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14,...

openSUSE Security Advisory (SUSE-SU-2024:2265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2024:2265-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2265-1 advisory. Update to version 3.6.22: - CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops...

SUSE-SU-2024:2265-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to version 3.6.22: - CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops bsc1224274 - CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning of a packet bsc1224259 - CVE-2024-4855: Th...

Wireshark Security Update (wnpa-sec-2024-09) - Windows

Wireshark is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Fedora: Security Advisory (FEDORA-2024-ed93e6d44f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0206 Updated wireshark packages fix security vulnerabilities

Memory handling issue in editcap could cause denial of service via crafted capture file. CVE-2024-4853 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file. CVE-2024-485...

SUSE-SU-2024:1865-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to version 3.6.22: - CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops bsc1224274 - CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning of a packet bsc1224259 - CVE-2024-4855: Th...

Wireshark 3.6.x < 3.6.24 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.24. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.24 advisory. - Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4855 Note that...

Wireshark 3.6.x < 3.6.24 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.24. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.24 advisory. - Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4855...

KLA70415 DoS vulnerability in Wireshark

Denial of Service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-09 · Editcap secret injection crash Related products Wireshark CVE list CVE-2024-4855 high Solution Update to the latest version...

Wireshark 4.2.x < 4.2.5 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.5 advisory. - MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22...

Wireshark 4.0.x < 4.0.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.15 advisory. - MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0...

CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file...

DEBIAN-CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file...

CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file...