CVE-2024-8645 Access of Uninitialized Pointer in Wireshark
An attacker can cause a denial of service in Wireshark by injecting crafted packets or providing a malicious capture file, triggering a crash in the SPRT dissector.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-8645?
CVE-2024-8645 is a medium-severity vulnerability in Wireshark Wireshark, published on 10 Sep 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
Weakness: CWE-824
Which versions are affected by CVE-2024-8645?
It affects 1 product.
Linux distribution packages (1)
wireshark openSUSE:Tumbleweed | All versions | 4.4.0-2.1 |
Products include Wireshark Wireshark.
How do I fix CVE-2024-8645?
Upgrade to a fixed version.
Is CVE-2024-8645 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-8645 exists.
Other vulnerabilities in Wireshark Wireshark
Sources
Also known as AZL-48987, AZL-49021, DEBIAN-CVE-2024-8645, GHSA-gr6m-q82v-j96h, UBUNTU-CVE-2024-8645, openSUSE-SU-2024:14341-1.