CVE-2024-0209

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.19 Wireshark versions 4.0.0 through 4.0.11 Wireshark version 4.2.0

Description The issue is related to the IEEE 1609.2 dissector in Wireshark, which can cause a crash, allowing denial of service via packet injection or crafted capture file. This is due to errors in pointer handling. A remote attacker can exploit this issue to cause a denial of service.

Recommendations For Wireshark versions 3.6.0 through 3.6.19, update to a newer version to resolve the issue. For Wireshark versions 4.0.0 through 4.0.11, update to a newer version to resolve the issue. For Wireshark version 4.2.0, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the IEEE 1609.2 dissector until a patch is available.