CVE-2024-0208
GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
Scoring
- Severity
- HIGH
- CVSS base score
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS probability
- 1.84%
- CWE
- CWE-230
- Published
- 2024-01-03
- Last modified
- 2026-03-27
Affected products
- Wireshark Foundation Wireshark
- Wireshark Foundation Wireshark
- Wireshark Foundation Wireshark
Weakness type
Related vulnerabilities
- CVE-2026-25659 — Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
- CVE-2026-25658 — Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
- CVE-2026-20086 — A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP)...
- CVE-2026-1461 — Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values
- CVE-2025-23225 — IBM MQ denial of service
- CVE-2024-11024 — AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset
- CVE-2024-10508 — RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
- CVE-2024-9781 — Improper Handling of Missing Values in Wireshark