Uncontrolled Recursion (Denial Of Service)

🗓️ 13 Jan 2024 07:16:55Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

GVCP in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 Uncontrolled Recursion Vulnerabilit

Reporter	Title	Published	Views	Family All 112
Tenable Nessus	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2024-487)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : wireshark (ALAS-2024-2416)	23 Jan 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: wireshark (CVE-2024-0208)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dla-3746 : libwireshark-data - security update	1 Mar 202400:00	–	nessus
Tenable Nessus	Debian dla-3906 : libwireshark-data - security update	30 Sep 202400:00	–	nessus
Tenable Nessus	Fedora 39 : wireshark (2024-b72131479b)	10 Feb 202400:00	–	nessus
Tenable Nessus	Fedora 38 : wireshark (2024-fdc7dfb959)	11 Feb 202400:00	–	nessus
Tenable Nessus	Wireshark 3.6.x < 3.6.20 Multiple Vulnerabilities (macOS)	3 Jan 202400:00	–	nessus
Tenable Nessus	Wireshark 4.0.x < 4.0.12 Multiple Vulnerabilities (macOS)	3 Jan 202400:00	–	nessus
Tenable Nessus	Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities (macOS)	3 Jan 202400:00	–	nessus

Vulners

Node

wireshark wiresharkMatch3.4.3-1debian

AND

wireshark wiresharkMatch3.2.8-0.1debian

AND

debian debian_linuxMatch999

wireshark wiresharkMatch3.2.3-r1os

AND

wireshark wiresharkMatch3.4.6-r0os

AND

wireshark wiresharkMatch4.0.10-r0os

AND

wireshark wiresharkMatch4.0.3-r0os

AND

wireshark wiresharkMatch3.4.7-r0os

AND

wireshark wiresharkMatch4.0.0-r0os

AND

wireshark wiresharkMatch3.4.9-r0os

AND

wireshark wiresharkMatch4.0.6-r1os

AND

wireshark wiresharkMatch3.4.11-r0os

AND

wireshark wiresharkMatch4.0.5-r1os

AND

wireshark wiresharkMatch3.6.7-r0os

AND

wireshark wiresharkMatch3.4.4-r0os

AND

wireshark wiresharkMatch4.0.4-r1os

AND

wireshark wiresharkMatch4.0.11-r0os

AND

wireshark wiresharkMatch3.4.3-r0os

AND

wireshark wiresharkMatch3.4.8-r0os

AND

wireshark wiresharkMatch3.6.6-r0os

AND

wireshark wiresharkMatch3.6.5-r1os

AND

wireshark wiresharkMatch4.0.4-r0os

AND

wireshark wiresharkMatch4.0.8-r0os

AND

wireshark wiresharkMatch4.0.6-r0os

AND

wireshark wiresharkMatch4.0.2-r0os

AND

wireshark wiresharkMatch3.6.8-r0os

AND

wireshark wiresharkMatch3.6.3-r1os

AND

wireshark wiresharkMatch3.4.13-r0os

AND

wireshark wiresharkMatch4.0.7-r0os

AND

wireshark wiresharkMatch3.2.2-r0os

AND

wireshark wiresharkMatch4.0.5-r0os

AND

wireshark wiresharkMatch3.4.5-r0os

AND

wireshark wiresharkMatch3.2.4-r0os

AND

wireshark wiresharkMatch4.0.1-r0os

AND

wireshark wiresharkMatch3.6.5-r0os

AND

alpinelinux alpine_linuxMatchedge

wireshark wiresharkMatch2.6.8-1.1debian

AND

wireshark wiresharkMatch2.6.20-0+deb10u1debian

AND

debian debian_linuxMatch10

wireshark wiresharkMatch3.2.8-0.1debian

AND

wireshark wiresharkMatch3.4.4-1debian

AND

debian debian_linuxMatch11

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-0208
gitlab	www.gitlab.com/wireshark/wireshark/-/issues/19496
lists	www.lists.debian.org/debian-lts-announce/2024/02/msg00016.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/34DBP5P2RHQ7XUABPANYYMOGV5KS6VEP/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MADSCHKZSCKQ5NLIX3UMOIJD2JZ65L4V/
wireshark	www.wireshark.org/security/wnpa-sec-2024-01.html

01 Mar 2024 07:53Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5 - 7.8

EPSS0.00034

SSVC