CVE-2024-4854

Summary

CVE-2024-4854 is a denial-of-service vulnerability affecting Wireshark versions 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22. Maliciously crafted TLV (Type-Length-Value) packets or capture files targeting MONGO and ZigBee dissectors can induce infinite loops, causing Wireshark to crash and become unresponsive. This issue may result in a denial-of-service condition for network analysts relying on Wireshark for monitoring and troubleshooting.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.