CVE-2024-0207: Out-of-bounds Read in Wireshark
Published Jan 3, 2024
·Updated
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Affected Software
1 affected component
Wireshark Wireshark=4.2.0
Remediation
Information
Upgrade to versions 4.2.0 or above.
Event History
Jan 3, 2024
CVE Published
07:31 AM
Data Sourced
07:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0207?
CVE-2024-0207 is classified as a denial of service vulnerability.
2
How do I fix CVE-2024-0207?
To fix CVE-2024-0207, upgrade Wireshark to version 4.2.1 or later.
3
What causes the CVE-2024-0207 vulnerability?
CVE-2024-0207 is caused by a crash in the HTTP3 dissector due to packet injection or crafted capture files.
4
Which version of Wireshark is affected by CVE-2024-0207?
Wireshark version 4.2.0 is the affected version related to CVE-2024-0207.
5
Is CVE-2024-0207 exploitable in a local environment?
Yes, CVE-2024-0207 can be exploited in a local environment through malicious packet injection or crafted capture files.