CVE-2024-4854
Fedoraproject
CVE-2024-4854: Wireshark MONGO and ZigBee TLV dissector infinite loop vulnerability allows for denial of service. Affects Wireshark versions 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22. An attacker can exploit this by injecting malicious packets or using a crafted capture file, causing the application to enter an infinite loop and become unresponsive. Despite a CVSS score of 7.5, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower level of immediate critical risk compared to vulnerabilities with scores above 80, but should still be addressed. Successful exploitation leads to application unavailability. Due to the vulnerability existing 'In The Wild', it indicates active exploitation or public availability of exploit code, making patching important.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.