CVE-2024-11595

HIGH

Wireshark 4.2.0-4.2.8 and 4.4.0-4.4.1 - Denial of Service via FiveCo RAP Dissector Infinite Loop

Title source: llm
STIX 2.1

Description

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

References (2)

Core 2
Core References
Issue Tracking issue-tracking permissions-required
https://gitlab.com/wireshark/wireshark/-/issues/20176

Scores

CVSS v3 7.8
EPSS 0.0026
EPSS Percentile 17.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-835
Status published
Products (3)
wireshark/wireshark 4.2.0 - 4.2.9
Wireshark Foundation/Wireshark 4.2.0 - 4.2.9
Wireshark Foundation/Wireshark 4.4.0 - 4.4.2
Published Nov 21, 2024
Tracked Since Feb 18, 2026