Every CVE Search/ Get API key

CVE-2024-0209

NULL Pointer Dereference in Wireshark

7.8 HighFix available

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.58%Up 0.5 points since Jan 18, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

NULL Pointer Dereference in Wireshark

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0209
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2024-16008 7.8

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
EUVD-2024-16008
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jccx-fvx2-cqjj 7.8

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows...

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
GHSA-jccx-fvx2-cqjj
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 7.8

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0209
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2024-0209 7.5

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
ALPINE-CVE-2024-0209
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-32323 7.5

CVE-2024-0209 affecting package wireshark 4.0.8-1

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
AZL-32323
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVAZL-37059 7.5

CVE-2024-0209 affecting package wireshark for versions less than 4.4.7-1

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
AZL-37059
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.8

NULL Pointer Dereference in Wireshark

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-0209
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVDEBIAN-CVE-2024-0209 7.5

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
DEBIAN-CVE-2024-0209
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1070 7.8

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file(CVE-2024-0208)

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file(CVE-2024-0209)

Record
OESA-2024-1070
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-0209 7.8

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

Record
UBUNTU-CVE-2024-0209
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1775032927 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775032927
Updated
2026-11-02
OSVCLSA-2026-1775039763 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775039763
Updated
2026-11-02
OSVopenSUSE-SU-2024:13556-1 No score

libwireshark17-4.2.1-1.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13556-1
Updated
2026-11-02
OSVSUSE-SU-2024:0058-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • Updated to Wireshark 3.6.20:

    • CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504).
    • CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505).
Record
SUSE-SU-2024:0058-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Alpine:v3.20
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.21
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.22
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.23
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Alpine:v3.24
 3.6.0 up to 4.0.12-r0
4.0.12-r0
wireshark
Azure Linux:2
 through 4.0.8-1 None known
wireshark
Azure Linux:3
 before 4.4.7-1
4.4.7-1
wireshark
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-cli
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
Show 40 moreShow less
Affected packages
PackageAffectedFixed
wireshark
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-cli
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark
Debian:12
 before 4.0.17-0+deb12u1, plus listed versions
4.0.10-14.0.11-14.0.11-1~deb12u14.0.3-14.0.5-1~exp1
Show 5 moreShow less
4.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1
4.0.17-0+deb12u1
wireshark
Debian:13
 before 4.2.2-1
4.2.2-1
wireshark
Debian:14
 before 4.2.2-1
4.2.2-1
wireshark
Debian:11
From an advisory covering 47 CVEs
 before 3.4.16-0+deb11u1, plus listed versions
3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1
3.4.16-0+deb11u1
wireshark
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.6.14-6.oe1
3.6.14-6.oe1
wireshark
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2003sp4
3.6.14-6.oe2003sp4
wireshark
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp3
3.6.14-6.oe2203sp3
wireshark
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp1
3.6.14-6.oe2203sp1
wireshark
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp2
3.6.14-6.oe2203sp2
wireshark
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 3.6.14-6.oe2203sp3
3.6.14-6.oe2203sp3
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Real Time 15 SP4
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Manager Proxy 4.3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Manager Server 4.3
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 3.6.20-150000.3.109.1
3.6.20-150000.3.109.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 4.2.1-1.1
4.2.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-0209 is a high vulnerability (CVSS 7.8) in Wireshark, published January 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in wireshark 4.0.12-r0.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open