CVE-2024-11596

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@gitlab.com

Published

2024-11-21

Last modified

2026-03-27

Weaknesses

CWE-125, CWE-126

Affected products

• Wireshark (Wireshark)
• Wireshark (Wireshark Foundation)

References

• https://gitlab.com/wireshark/wireshark/-/issues/20214
• https://www.wireshark.org/security/wnpa-sec-2024-15.html