Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Medium 6.4
  CVE-2024-4854

  Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

  MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine
  May 14, 2024
• Low 3.6
  CVE-2024-4853

  Mismatched Memory Management Routines in editcap

  Memory handling issue in editcap could cause denial of service via crafted capture file

  Wireshark Foundation editcap wireshark wireshark Debian Ubuntu Azure Linux Alpine
  May 14, 2024
• Low 3.6
  CVE-2024-4855

  Use After Free in editcap

  Use after free issue in editcap could cause denial of service via crafted capture file

  Wireshark Foundation editcap wireshark wireshark Debian Ubuntu Azure Linux Alpine
  May 14, 2024

Revision history

1. 2026-03-19 #9

   Neue Updates von Amazon aufgenommen

2. 2025-05-11 #8

   Neue Updates von SUSE aufgenommen

3. 2024-11-21 #7

   Neue Updates von XEROX aufgenommen

4. 2024-09-29 #6

   Neue Updates von Debian aufgenommen

5. 2024-08-19 #5

   Neue Updates von SUSE aufgenommen

6. 2024-07-02 #4

   Neue Updates von SUSE aufgenommen

7. 2024-05-22 #3

   Neue Updates von Fedora aufgenommen

8. 2024-05-15 #2

   Referenz(en) aufgenommen: WNPA-SEC-2024-09

9. 2024-05-13 #1

   Initiale Fassung

References

• CVE Record vom 2024-05-13
  https://www.cve.org/CVERecord?id=CVE-2024-4853
• CVE Record vom 2024-05-13
  https://www.cve.org/CVERecord?id=CVE-2024-4854
• CVE Record vom 2024-05-13
  https://www.cve.org/CVERecord?id=CVE-2024-4855
• Fedora Security Advisory FEDORA-2024-ED93E6D44F vom 2024-05-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ed93e6d44f
• Fedora Security Advisory FEDORA-2024-CD1F01E5D9 vom 2024-05-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-cd1f01e5d9
• SUSE Security Update SUSE-SU-2024:2265-1 vom 2024-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018845.html
• SUSE Security Update SUSE-SU-2024:1865-1 vom 2024-08-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6M2JVGHSSCD5T5MY57N6YOWRPITUX3K6/
• Debian Security Advisory DLA-3906 vom 2024-09-30
  https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html
• XEROX Security Advisory XRX24-017 vom 2024-11-21
  https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf
• SUSE Security Update SUSE-SU-2025:1522-1 vom 2025-05-09
  https://lists.suse.com/pipermail/sle-security-updates/2025-May/020820.html
• Amazon Linux Security Advisory ALAS2-2026-3208 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3208.html