CVE-2024-8250: Expired Pointer Dereference in Wireshark
Published Aug 28, 2024
·Updated
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
Affected Software
2 affected components
Wireshark Wireshark>=4.0.0<4.0.17
Wireshark Wireshark>=4.2.0<4.2.7
Remediation
Information
Upgrade to versions 4.2.7 or above.
Event History
Aug 28, 2024
CVE Published
via MITRE·11:30 PM
Data Sourced
via MITRE·11:30 PM
RemedyDescriptionSeverityWeakness
Aug 29, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-8250?
CVE-2024-8250 is classified as a denial of service vulnerability.
2
How do I fix CVE-2024-8250?
To fix CVE-2024-8250, upgrade Wireshark to version 4.0.17 or 4.2.7 or later.
3
What versions of Wireshark are affected by CVE-2024-8250?
CVE-2024-8250 affects Wireshark versions from 4.0.0 to 4.0.16 and 4.2.0 to 4.2.6.
4
What exploitation methods are associated with CVE-2024-8250?
CVE-2024-8250 can be exploited through packet injection or by using a crafted capture file.
5
What are the potential impacts of CVE-2024-8250?
Exploiting CVE-2024-8250 can lead to a crash of the Wireshark application, resulting in denial of service.