Every CVE Search/ Get API key

CVE-2024-8250

Expired Pointer Dereference in Wireshark

7.8 HighFix available

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.32%Up 0.3 points since Aug 29, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-8250
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-825
Updated
2026-11-02
EUVDEUVD-2024-49046 7.8

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
EUVD-2024-49046
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-4xqj-427q-hf6q 7.8

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service...

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
GHSA-4xqj-427q-hf6q
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787, CWE-825
Updated
2026-11-02
NVD 7.8

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-8250
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-825, CWE-787
Updated
2026-11-02
OSVAZL-48338 5.5

CVE-2024-8250 affecting package wireshark 4.0.8-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
AZL-48338
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-48339 5.5

CVE-2024-8250 affecting package wireshark for versions less than 4.4.7-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
AZL-48339
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSV 7.8

Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
CVE-2024-8250
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-825
Updated
2026-11-02
OSVDEBIAN-CVE-2024-8250 5.5

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
DEBIAN-CVE-2024-8250
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2090 7.8

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file(CVE-2024-8250)

Record
OESA-2024-2090
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-8250 7.8

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Record
UBUNTU-CVE-2024-8250
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1775032927 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775032927
Updated
2026-11-02
OSVCLSA-2026-1775039763 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775039763
Updated
2026-11-02
OSVMGASA-2024-0303 No score

Updated wireshark packages fix security vulnerability

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.2.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file. (CVE-2024-8250)

Record
MGASA-2024-0303
Updated
2026-11-02
OSVopenSUSE-SU-2024:14302-1 No score

libwireshark17-4.2.7-1.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14302-1
Updated
2026-11-02
OSVSUSE-SU-2024:3250-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).
Record
SUSE-SU-2024:3250-1
Updated
2026-11-02
OSVSUSE-SU-2024:3323-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).
  • CVE-2020-26421: Fixed USB HID dissector crash (bsc#1179933).
Record
SUSE-SU-2024:3323-1
Updated
2026-11-02
OSVSUSE-SU-2024:3333-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • Upgraded Wireshark to version 3.6.24.
  • CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).
Record
SUSE-SU-2024:3333-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Azure Linux:2
 through 4.0.8-1 None known
wireshark
Azure Linux:3
 before 4.4.7-1
4.4.7-1
wireshark
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-cli
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-cli
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark
Debian:12
 before 4.0.17-0+deb12u1, plus listed versions
4.0.10-14.0.11-14.0.11-1~deb12u14.0.3-14.0.5-1~exp1
Show 5 moreShow less
4.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1
4.0.17-0+deb12u1
wireshark
Debian:13
 before 4.4.0-1
4.4.0-1
Show 24 moreShow less
Affected packages
PackageAffectedFixed
wireshark
Debian:14
 before 4.4.0-1
4.4.0-1
wireshark
Debian:11
From an advisory covering 47 CVEs
 before 3.4.16-0+deb11u1, plus listed versions
3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1
3.4.16-0+deb11u1
wireshark
Mageia:9
 before 4.0.17-1.mga9
4.0.17-1.mga9
wireshark
openEuler:22.03-LTS-SP1
 before 3.6.14-9.oe2203sp1
3.6.14-9.oe2203sp1
wireshark
openEuler:24.03-LTS
 before 3.6.14-10.oe2403
3.6.14-10.oe2403
wireshark
openEuler:22.03-LTS-SP4
 before 3.6.14-9.oe2203sp4
3.6.14-9.oe2203sp4
wireshark
openEuler:22.03-LTS-SP3
 before 3.6.14-9.oe2203sp3
3.6.14-9.oe2203sp3
wireshark
openEuler:20.03-LTS-SP4
 before 3.6.14-9.oe2003sp4
3.6.14-9.oe2003sp4
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 4.2.7-150600.18.11.1
4.2.7-150600.18.11.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
From an advisory covering 2 CVEs
 before 4.2.7-150600.18.11.1
4.2.7-150600.18.11.1
wireshark
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 4.2.7-150600.18.11.1
4.2.7-150600.18.11.1
wireshark
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 2.4.16-48.57.1
2.4.16-48.57.1
wireshark
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 2.4.16-48.57.1
2.4.16-48.57.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 2.4.16-48.57.1
2.4.16-48.57.1
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 3.6.24-150000.3.118.1
3.6.24-150000.3.118.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 3.6.24-150000.3.118.1
3.6.24-150000.3.118.1
wireshark
openSUSE:Leap 15.5
 before 3.6.24-150000.3.118.1
3.6.24-150000.3.118.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3
 None known
wireshark
openSUSE:Tumbleweed
 before 4.2.7-1.1
4.2.7-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-8250 is a high vulnerability (CVSS 7.8) in Wireshark, published August 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in wireshark 4.4.7-1.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open