Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-9780

Fixed in a distro release EPSS <1%CVSS 7.8

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

Published 2024-10-10 · CVE record · OSV

Products: Wireshark Foundation Wireshark, wireshark

Distro releases

ReleasePackageFixed in
Debian:13wireshark4.4.1-1
Debian:14wireshark4.4.1-1
SUSE:Linux Enterprise Module for Basesystem 15 SP7libvirt11.0.0-150700.4.19.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7wireshark4.6.4-150700.21.8.1
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7wireshark4.6.4-150700.21.8.1
SUSE:Linux Enterprise Module for Server Applications 15 SP7libvirt11.0.0-150700.4.19.1
Ubuntu:24.04:LTSwiresharkno fix
Ubuntu:Pro:20.04:LTSwiresharkno fix
Ubuntu:Pro:22.04:LTSwiresharkno fix
openSUSE:Tumbleweedwireshark4.4.1-1.1