Synced 30 Sept 2026 20:54 UTC Account
← All products

CVE-2024-4854

MEDIUM severity · CVSS 6.4 · CWE-835
6.4CVSS MEDIUM

Summary

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

Impact & exploitability

Attack vectorNetwork
Attack complexityHigh
Privileges requiredNone
User interactionRequired
Confidentiality impactLow
Integrity impactLow
Availability impactHigh
Exploit probability (EPSS)1%

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

Affected products we track (1)

Wireshark

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information