🔐 CVE Alert

CVE-2024-0208

HIGH 7.8

Improper Handling of Missing Values in Wireshark

CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
9th

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CWE CWE-230
Vendor wireshark foundation
Product wireshark
Published Jan 3, 2024
Last Updated Mar 27, 2026
Stay Ahead of the Next One

Get instant alerts for wireshark foundation wireshark

Be the first to know when new high vulnerabilities affecting wireshark foundation wireshark are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Wireshark Foundation / Wireshark
4.2.0 < 4.2.1 4.0.0 < 4.0.12 3.6.0 < 3.6.20

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wireshark.org: https://www.wireshark.org/security/wnpa-sec-2024-01.html gitlab.com: https://gitlab.com/wireshark/wireshark/-/issues/19496 lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/34DBP5P2RHQ7XUABPANYYMOGV5KS6VEP/ lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/MADSCHKZSCKQ5NLIX3UMOIJD2JZ65L4V/ lists.debian.org: https://lists.debian.org/debian-lts-announce/2024/02/msg00016.html lists.debian.org: https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html