CVE-2024-0210: Uncontrolled Recursion in Wireshark
Published Jan 3, 2024
·Updated
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Affected Software
1 affected component
Wireshark Wireshark=4.2.0
Remediation
Information
Upgrade to versions 4.2.0 or above.
Event History
Jan 3, 2024
CVE Published
07:31 AM
Data Sourced
07:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0210?
CVE-2024-0210 is classified as a Denial of Service vulnerability.
2
How do I fix CVE-2024-0210?
To fix CVE-2024-0210, upgrade Wireshark to a version later than 4.2.0.
3
What causes the CVE-2024-0210 vulnerability?
CVE-2024-0210 is caused by a crash in the Zigbee TLV dissector due to mishandled packet injection or crafted capture files.
4
Which versions of Wireshark are affected by CVE-2024-0210?
CVE-2024-0210 affects Wireshark version 4.2.0.
5
What can be the impact of CVE-2024-0210?
The impact of CVE-2024-0210 is a denial of service that can disrupt data packet analysis.