CVE-2024-4855

Use after free issue in editcap could cause denial of service via crafted capture file

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

Memory handling issue in editcap could cause denial of service via crafted capture file(CVE-2024-4853)

Use after free issue in editcap could cause denial of service via crafted capture file(CVE-2024-4855)

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

Memory handling issue in editcap could cause denial of service via crafted capture file(CVE-2024-4853)

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file(CVE-2024-4854)

Use after free issue in editcap could cause denial of service via crafted capture file(CVE-2024-4855)

Use after free issue in editcap could cause denial of service via crafted capture file

Use after free issue in editcap could cause denial of service via crafted capture file

Use after free issue in editcap could cause denial of service via crafted capture file

• Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API)
• CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference
• CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds
• CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed
• CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE
• CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte
• CVE-2023-1993: LISP dissector: do not read past the LCAF payload length
• CVE-2026-6867: SMB2 dissector: put bounds on total chained compression
• CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length
• CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS
• CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places
• CVE-2026-6534: USB HID dissector: skip items with a report size of zero
• CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case
• CVE-2026-5404: K12 reader: fix a possible stack overflow when writing
• CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case
• CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen
• CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state
• CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression
• CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop
• CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them
• CVE-2026-6532: kismet dissector: fix a heap buffer overflow
• CVE-2026-5401: AFP Spotlight dissector: add recursion checks
• CVE-2026-5406: fcswils dissector: add recursion checks
• CVE-2026-5408: BT DHT dissector: add recursion checks
• CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks
• CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks
• CVE-2026-6535: epan: fix potential overflows in zlib decompression

Memory handling issue in editcap could cause denial of service via crafted capture file. (CVE-2024-4853) MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file. (CVE-2024-4854) Use after free issue in editcap could cause denial of service via crafted capture file. (CVE-2024-4855)

These are all security issues fixed in the libwireshark17-4.2.5-1.1 package on the GA media of openSUSE Tumbleweed.

This update for wireshark fixes the following issues:

Update to version 3.6.22:

• CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274)
• CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning of a packet (bsc#1224259)
• CVE-2024-4855: The editcap command line utility could crash when injecting secrets while writing multiple files (bsc#1224276)

This update for wireshark fixes the following issues:

Update to version 3.6.22:

• CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274)
• CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning of a packet (bsc#1224259)
• CVE-2024-4855: The editcap command line utility could crash when injecting secrets while writing multiple files (bsc#1224276)