PT-2024-15387

CVE-2024-0210

Published

2024-01-03

Updated

2024-09-09

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wireshark version 4.2.0

Description The issue allows for denial of service via packet injection or crafted capture file, specifically affecting the Zigbee TLV dissector in Wireshark.

Recommendations For Wireshark version 4.2.0, update to a newer version to mitigate the risk. As a temporary workaround, consider disabling the Zigbee TLV dissector until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Han Zheng

Vendors

Affected products

Weakness enumeration

CWE-674: Uncontrolled Recursion

Related identifiers

CVE-2024-0210