CVE-2024-4853

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-4853
Memory handling issue in editcap could cause denial of service via crafted capture file

3.6 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://gitlab.com/wireshark/wireshark/-/issues/19724 Exploit Issue Tracking
https://www.wireshark.org/security/wnpa-sec-2024-08.html Vendor Advisory
https://gitlab.com/wireshark/wireshark/-/issues/19724 Exploit Issue Tracking
https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ Mailing List
https://www.wireshark.org/security/wnpa-sec-2024-08.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html -

05 Aug 2025, 15:45

Type Values Removed Values Added
First Time Fedoraproject
Wireshark
Wireshark wireshark
Fedoraproject fedora
CWE CWE-787
CPE cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
References () https://gitlab.com/wireshark/wireshark/-/issues/19724 - () https://gitlab.com/wireshark/wireshark/-/issues/19724 - Exploit, Issue Tracking
References () https://www.wireshark.org/security/wnpa-sec-2024-08.html - () https://www.wireshark.org/security/wnpa-sec-2024-08.html - Vendor Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ - Mailing List
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ - Mailing List

21 Nov 2024, 09:43

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ -
References () https://gitlab.com/wireshark/wireshark/-/issues/19724 - () https://gitlab.com/wireshark/wireshark/-/issues/19724 -
References () https://www.wireshark.org/security/wnpa-sec-2024-08.html - () https://www.wireshark.org/security/wnpa-sec-2024-08.html -

29 Aug 2024, 15:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/', 'source': 'cve@gitlab.com'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/', 'source': 'cve@gitlab.com'}

10 Jun 2024, 18:15

Type Values Removed Values Added
Summary
  • (es) Un problema de manejo de memoria en editcap podría causar denegación de servicio a través de un archivo de captura manipulado
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2BSENPSIALF2WIZF7M3QBVWYBMFGW/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKFJAZDKXGFFQPRDYLX2AANRNMYZZEZ/ -

14 May 2024, 15:45

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 15:45

Updated : 2025-11-03 23:16

NVD link : CVE-2024-4853

Mitre link : CVE-2024-4853

CVE.ORG link : CVE-2024-4853

JSON object : View

Products Affected

fedoraproject

  • fedora

wireshark

  • wireshark
CWE
CWE-762

Mismatched Memory Management Routines

CWE-787

Out-of-bounds Write