CVE-2024-4855

LOW

Wireshark 3.6.0-3.6.22 and 4.0.0-4.0.14 and 4.2.0-4.2.4 - Use-After-Free via Crafted Capture File

Title source: llm

Use after free issue in editcap could cause denial of service via crafted capture file

Core 6

Core References

Vendor Advisory

Mailing List

Mailing List

Exploit, Issue Tracking issue-tracking permissions-required

Exploit, Issue Tracking issue-tracking permissions-required

Exploit, Issue Tracking issue-tracking permissions-required

CVSS v3 3.6

EPSS 0.0002

EPSS Percentile 6.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-416

Status published

Products (6)

fedoraproject/fedora 39

fedoraproject/fedora 40

wireshark/wireshark 3.6.0 - 3.6.23

Wireshark Foundation/editcap 3.6.0 - 3.6.23

Wireshark Foundation/editcap 4.0.0 - 4.0.15

Wireshark Foundation/editcap 4.2.0 - 4.2.5

Published May 14, 2024

Tracked Since Feb 18, 2026