🔐 CVE Alert

CVE-2024-2955

HIGH 7.8

Mismatched Memory Management Routines in Wireshark

CVSS Score
7.8
EPSS Score
0.1%
EPSS Percentile
26th

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file

CWE CWE-762
Vendor wireshark foundation
Product wireshark
Published Mar 26, 2024
Last Updated Apr 8, 2026
Stay Ahead of the Next One

Get instant alerts for wireshark foundation wireshark

Be the first to know when new high vulnerabilities affecting wireshark foundation wireshark are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Wireshark Foundation / Wireshark
4.2.0 < 4.2.4 4.0.0 < 4.0.14

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wireshark.org: https://www.wireshark.org/security/wnpa-sec-2024-06.html gitlab.com: https://gitlab.com/wireshark/wireshark/-/issues/19695 lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/ZD2MNS6EW2K2SSMN4YBGPZCC47KBDNEE/ lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/Q7TWJQKXOV4HYI5C4TWRKTN7B5YL7GTU/ lists.debian.org: https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html