CVE-2024-8250CWE-825

Expired Pointer Dereference in Wireshark

High · published August 28, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-825 · Expired Pointer Dereference
Published
2024-08-28T23:30Z
EPSS history
Timeline
  • 28 AUG 23:30Z
    Expired Pointer Dereference in Wireshark
    cvelistv5