6.4
Medium
CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow…
Description
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
Affected products and versions
References
- www.wireshark.org www.wireshark.org
- GitLab Issue #19726 gitlab.com
- gitlab.com gitlab.com
- gitlab.com gitlab.com
Timeline
- Published
- Last modified
Other CVEs of Wireshark
The 185 CVEs of Wireshark →
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95389
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
8.1
High
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium