AZL-42518

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42518.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-42518

Upstream

CVE-2024-4854

Published

2024-05-14T15:45:18Z

Modified

2026-04-01T05:14:38.051993Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

CVE-2024-4854 affecting package wireshark 4.0.8-1

Details

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

References

https://nvd.nist.gov/vuln/detail/CVE-2024-4854

Affected packages

Azure Linux:2 / wireshark

Package

Name: wireshark
Purl: pkg:rpm/azure-linux/wireshark

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

4.0.8-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42518.json"