Every CVE Search/ Get API key

CVE-2024-0208

Improper Handling of Missing Values in Wireshark

7.8 HighFix available

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.82%Up 1.8 points since Jan 18, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

Improper Handling of Missing Values in Wireshark

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0208
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-230
Updated
2026-11-02
EUVDEUVD-2024-16007 7.8

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
EUVD-2024-16007
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-phw4-gv7f-mc27 7.8

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of...

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
GHSA-phw4-gv7f-mc27
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-230, CWE-674
Updated
2026-11-02
NVD 7.8

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0208
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-230
Updated
2026-11-02
OSVALPINE-CVE-2024-0208 7.5

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
ALPINE-CVE-2024-0208
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-32318 7.5

CVE-2024-0208 affecting package wireshark 4.0.8-1

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
AZL-32318
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVAZL-37058 7.5

CVE-2024-0208 affecting package wireshark for versions less than 4.4.7-1

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
AZL-37058
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.8

Improper Handling of Missing Values in Wireshark

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0208
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-230
Updated
2026-11-02
OSVDEBIAN-CVE-2024-0208 7.5

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
DEBIAN-CVE-2024-0208
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1070 7.8

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file(CVE-2024-0208)

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file(CVE-2024-0209)

Record
OESA-2024-1070
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-0208 7.8

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
UBUNTU-CVE-2024-0208
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1775032927 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775032927
Updated
2026-11-02
OSVCLSA-2026-1775039763 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775039763
Updated
2026-11-02
OSVMGASA-2024-0045 No score

Updated wireshark packages fix security vulnerabilities

The updated packages fix security vulnerabilities: RTPS dissector memory leak. (CVE-2023-5371) SSH dissector invalid read of memory blocks. (CVE-2023-6174) NetScreen File Parsing Heap-based Buffer Overflow. (CVE-2023-6175) GVCP dissector crash via packet injection or crafted capture file. (CVE-2024-0208)

Record
MGASA-2024-0045
Updated
2026-11-02
OSVopenSUSE-SU-2024:13556-1 No score

libwireshark17-4.2.1-1.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13556-1
Updated
2026-11-02
OSVSUSE-SU-2024:0058-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • Updated to Wireshark 3.6.20:

    • CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504).
    • CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505).
Record
SUSE-SU-2024:0058-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Alpine:v3.20
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.21
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.22
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.23
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.24
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Azure Linux:2
 through 4.0.8-1 None known
wireshark
Azure Linux:3
 before 4.4.7-1
4.4.7-1
wireshark
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-cli
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
Show 42 moreShow less
Affected packages
PackageAffectedFixed
wireshark
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-cli
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark
Debian:12
 before 4.0.17-0+deb12u1, plus listed versions
4.0.10-14.0.11-14.0.11-1~deb12u14.0.3-14.0.5-1~exp1
Show 5 moreShow less
4.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1
4.0.17-0+deb12u1
wireshark
Debian:13
 before 4.2.2-1
4.2.2-1
wireshark
Debian:14
 before 4.2.2-1
4.2.2-1
wireshark
Debian:10
From an advisory covering 4 CVEs
 before 2.6.20-0+deb10u8, plus listed versions
2.6.10-12.6.20-0+deb10u12.6.20-0+deb10u22.6.20-0+deb10u32.6.20-0+deb10u4
Show 5 moreShow less
2.6.20-0+deb10u52.6.20-0+deb10u62.6.20-0+deb10u72.6.8-1.12.6.9-1
2.6.20-0+deb10u8
wireshark
Debian:11
From an advisory covering 47 CVEs
 before 3.4.16-0+deb11u1, plus listed versions
3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1
3.4.16-0+deb11u1
wireshark
Mageia:9
From an advisory covering 4 CVEs
 before 4.0.12-1.mga9
4.0.12-1.mga9
wireshark
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.6.14-6.oe1
3.6.14-6.oe1
wireshark
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2003sp4
3.6.14-6.oe2003sp4
wireshark
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp3
3.6.14-6.oe2203sp3
wireshark
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp1
3.6.14-6.oe2203sp1
wireshark
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp2
3.6.14-6.oe2203sp2
wireshark
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp3
3.6.14-6.oe2203sp3
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Real Time 15 SP4
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Manager Proxy 4.3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Manager Server 4.3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 4.2.1-1.1
4.2.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-0208 is a high vulnerability (CVSS 7.8) in Wireshark, published January 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 78th percentile. Fixed in wireshark 4.0.12-r0.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open