CVE-2024-4853: low-severity vulnerability in Wireshark Foundation editcap
Mismatched Memory Management Routines in editcap
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.6epss 0.4%
Memory handling issue in editcap could cause denial of service via crafted capture file
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
Affected products
Wireshark Foundation · editcapRelated CVEs — Wireshark Foundation editcap
In the same product, most dangerous first.
References
https://gitlab.com/wireshark/wireshark/-/issues/19724https://lists.debian.org/debian-lts-announce/2024/09/msg00049.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/https://www.wireshark.org/security/wnpa-sec-2024-08.html