CVE-2024-9781

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 10, 2024
Updated: Nov 25, 2024
CWE ID 230

Summary

CVE-2024-9781 is a denial-of-service vulnerability affecting Wireshark versions 4.2.0 to 4.4.0. The AppleTalk and RELOAD Framing dissector in these versions is susceptible to crashing upon processing maliciously crafted packets or capture files. An attacker can exploit this issue by injecting packets or providing a crafted capture file to trigger the crash, causing a denial-of-service condition. This vulnerability may impact network investigations, as Wireshark is widely used for network troubleshooting and security analysis. Users are advised to update to a patched version of Wireshark to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Wireshark

Affected Vendors

  • Wireshark Foundation