CVE-2024-11596: Buffer Over-read in Wireshark
Published Nov 21, 2024
·Updated
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
Affected Software
3 affected components
Wireshark Wireshark>=4.4.0<=4.4.1, >=4.2.0<=4.2.8
Wireshark Wireshark>=4.2.0<4.2.9
Wireshark Wireshark>=4.4.0<4.4.2
Remediation
Information
Upgrade to version 4.4.2, 4.2.9 or above.
Event History
Nov 21, 2024
CVE Published
via MITRE·09:30 AM
Data Sourced
via MITRE·09:30 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-11596?
CVE-2024-11596 has a severity rating that indicates a denial of service vulnerability due to a crash in the ECMP dissector.
2
How do I fix CVE-2024-11596?
To fix CVE-2024-11596, upgrade your Wireshark installation to version 4.4.2 or later, or 4.2.9 or later.
3
What systems are affected by CVE-2024-11596?
CVE-2024-11596 affects Wireshark versions between 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8.
4
How can CVE-2024-11596 be exploited?
CVE-2024-11596 can be exploited through packet injection or by using a crafted capture file.
5
What are the potential consequences of CVE-2024-11596?
The potential consequence of CVE-2024-11596 is a denial of service, leading to application crashes.