CVE-2024-9781
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-9781 is a denial-of-service vulnerability affecting Wireshark versions 4.2.0 to 4.4.0. The AppleTalk and RELOAD Framing dissector in these versions is susceptible to crashing upon processing maliciously crafted packets or capture files. An attacker can exploit this issue by injecting packets or providing a crafted capture file to trigger the crash, causing a denial-of-service condition. This vulnerability may impact network investigations, as Wireshark is widely used for network troubleshooting and security analysis. Users are advised to update to a patched version of Wireshark to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Wireshark
Affected Vendors
- Wireshark Foundation