CVE-2024-9781

HIGH

Wireshark 4.2.0-4.2.7 and 4.4.0 - Denial of Service via AppleTalk and RELOAD Framing Dissector

Title source: llm
STIX 2.1

Description

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file

References (2)

Core 2
Core References
Patch issue-tracking permissions-required
https://gitlab.com/wireshark/wireshark/-/issues/20114

Scores

CVSS v3 7.8
EPSS 0.0018
EPSS Percentile 38.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-230
Status published
Products (4)
wireshark/wireshark 4.4.0
wireshark/wireshark 4.2.0 - 4.2.8
Wireshark Foundation/Wireshark 4.2.0 - 4.2.8
Wireshark Foundation/Wireshark 4.4.0 - 4.4.1
Published Oct 10, 2024
Tracked Since Feb 18, 2026