CVE-2024-0210

Uncontrolled Recursion in Wireshark

State
Published
Severity
7.8 High
Published
Jan 3, 2024
Updated
Mar 27, 2026
Reserved
Jan 3, 2024

Read the record on cve.org

Description

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HGitLab

Weaknesses

Affected Products

ProductVersions
WiresharkWireshark Foundation
  • 4.2.0 to before 4.2.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.