Missing Initialization of Resource

CVE-2024-9780

Medium

5.5/10

Summary

ITS dissector crash in Wireshark 4.4.0rc0 through 4.4.0 allows Denial of Service(DoS) via packet injection or crafted capture file.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-909 - Missing Initialization of Resource

The software does not initialize a critical resource.

References

Advisory Timeline

Published Oct 10, 2024