AZL-42564

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42564.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-42564

Upstream

CVE-2024-4854

Published

2024-05-14T15:45:18Z

Modified

2026-04-01T05:14:46.408637Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

CVE-2024-4854 affecting package wireshark for versions less than 4.4.7-1

Details

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

References

https://nvd.nist.gov/vuln/detail/CVE-2024-4854

Affected packages

Azure Linux:3 / wireshark

Package

Name: wireshark
Purl: pkg:rpm/azure-linux/wireshark

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.7-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42564.json"