CVE-2024-8645
Access of Uninitialized Pointer in Wireshark
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Access of Uninitialized Pointer in Wireshark
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-8645- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-824
- Updated
- 2026-11-02
EUVDEUVD-2024-49322
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2024-49322- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gr6m-q82v-j96h
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via...
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
GHSA-gr6m-q82v-j96h- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-824
- Updated
- 2026-11-02
NVD
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-8645- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-824
- Updated
- 2026-11-02
OSVAZL-48987
CVE-2024-8645 affecting package wireshark 4.0.8-1
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
AZL-48987- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-49021
CVE-2024-8645 affecting package wireshark for versions less than 4.4.7-1
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
AZL-49021- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSV
Access of Uninitialized Pointer in Wireshark
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-8645- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-824
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-8645
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2024-8645- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-2242
wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.
Security Fix(es):
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.(CVE-2024-24476)
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file(CVE-2024-8645)
- Record
OESA-2024-2242- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-8645
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2024-8645- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14341-1No score
libwireshark18-4.4.0-2.1 on GA media
These are all security issues fixed in the libwireshark18-4.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14341-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3250-1No score
Security update for wireshark
This update for wireshark fixes the following issues:
- CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).
- Record
SUSE-SU-2024:3250-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAzure Linux:2 | through 4.0.8-1 | None known |
wiresharkAzure Linux:3 | before 4.4.7-1 | 4.4.7-1 |
wiresharkDebian:12 | before 4.0.17-0+deb12u1, plus listed versions 4.0.10-14.0.11-14.0.11-1~deb12u14.0.3-14.0.5-1~exp1 Show 5 moreShow less4.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1 | 4.0.17-0+deb12u1 |
wiresharkDebian:13 | before 4.2.6-1 | 4.2.6-1 |
wiresharkDebian:14 | before 4.2.6-1 | 4.2.6-1 |
wiresharkDebian:11 From an advisory covering 47 CVEs | before 3.4.16-0+deb11u1, plus listed versions 3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 | 3.4.16-0+deb11u1 |
wiresharkopenEuler:22.03-LTS-SP3 From an advisory covering 2 CVEs | before 3.6.14-11.oe2203sp3 | 3.6.14-11.oe2203sp3 |
wiresharkopenEuler:20.03-LTS-SP4 From an advisory covering 2 CVEs | before 3.6.14-11.oe2003sp4 | 3.6.14-11.oe2003sp4 |
wiresharkopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs | before 3.6.14-11.oe2203sp1 | 3.6.14-11.oe2203sp1 |
wiresharkopenEuler:24.03-LTS From an advisory covering 2 CVEs | before 3.6.14-12.oe2403 | 3.6.14-12.oe2403 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkopenEuler:22.03-LTS-SP4 From an advisory covering 2 CVEs | before 3.6.14-11.oe2203sp4 | 3.6.14-11.oe2203sp4 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs | before 4.2.7-150600.18.11.1 | 4.2.7-150600.18.11.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 2 CVEs | before 4.2.7-150600.18.11.1 | 4.2.7-150600.18.11.1 |
wiresharkopenSUSE:Leap 15.6 From an advisory covering 2 CVEs | before 4.2.7-150600.18.11.1 | 4.2.7-150600.18.11.1 |
wiresharkUbuntu:Pro:14.04:LTS | All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 | None known |
wiresharkUbuntu:Pro:16.04:LTS | All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 | None known |
wiresharkUbuntu:Pro:18.04:LTS | All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 | None known |
wiresharkUbuntu:Pro:20.04:LTS | All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 | None known |
wiresharkUbuntu:Pro:22.04:LTS | All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 | None known |
wiresharkUbuntu:24.04:LTS | All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 | None known |
wiresharkopenSUSE:Tumbleweed | before 4.4.0-2.1 | 4.4.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-8645 is a medium vulnerability (CVSS 5.5) in Wireshark, published September 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in wireshark 4.4.7-1.
References
wireshark.org/security/wnpa-sec-2024-10.html
gitlab.com/wireshark/wireshark/-/issues/19559
lists.debian.org/debian-lts-announce/2024/09/msg00049.html
nvd.nist.gov/vuln/detail/CVE-2024-8645
github.com/advisories/GHSA-gr6m-q82v-j96h
Show 11 moreShow less
security-tracker.debian.org/tracker/CVE-2024-8645
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2242
suse.com/support/update/announcement/2024/suse-su-20243250-1
bugzilla.suse.com/1229907
ubuntu.com/security/CVE-2024-8645
cve.org/CVERecord?id=CVE-2024-8645
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QRCUAL4EN5YNTHYJQLL3EKNFBUBEWRNC