CVE-2024-0211: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/wiresharkto a version that resolves this vulnerability.Fixed in 4.0.17-0+deb12u1 - Upgrade
Upgrade
debian/wiresharkto a version that resolves this vulnerability.Fixed in 4.2.2-1 - Upgrade
Upgrade
debian/wiresharkto a version that resolves this vulnerability.Fixed in 4.0.17-0+deb12u3Fixed in 4.4.18-0+deb13u1Fixed in 4.4.19-0+deb13u1Fixed in 4.6.9-1 - Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0211?
CVE-2024-0211 has a severity rating that indicates it can lead to a denial of service.
How do I fix CVE-2024-0211?
To fix CVE-2024-0211, you should upgrade to a patched version of Wireshark that addresses this vulnerability.
What specific version of Wireshark is affected by CVE-2024-0211?
CVE-2024-0211 specifically affects Wireshark version 4.2.0.
What type of attack does CVE-2024-0211 enable?
CVE-2024-0211 enables denial of service attacks through packet injection or crafted capture files.
What impact does CVE-2024-0211 have on users?
CVE-2024-0211 can cause a crash of the Wireshark application, impacting the user's ability to analyze network traffic.