CVE-2024-9780
Missing Initialization of a Variable in Wireshark
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Missing Initialization of a Variable in Wireshark
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9780- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-456
- Updated
- 2026-11-02
EUVDEUVD-2024-50107
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2024-50107- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4rf2-7phj-4vwq
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted...
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
GHSA-4rf2-7phj-4vwq- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-456, CWE-909
- Updated
- 2026-11-02
NVD
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9780- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-456, CWE-909
- Updated
- 2026-11-02
OSV
Missing Initialization of a Variable in Wireshark
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9780- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-456
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-9780
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2024-9780- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-9780
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2024-9780- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14396-1 No score
libwireshark18-4.4.1-1.1 on GA media
These are all security issues fixed in the libwireshark18-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14396-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1169-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update Wireshark to version 4.6.4 (jsc#PED-15400).
- CVE-2024-9780: ITS dissector crash (bsc#1231475).
- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).
- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).
- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).
- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).
- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).
- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).
- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).
- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service (bsc#1254472).
- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).
- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).
- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).
- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).
- CVE-2026-3201: missing limit checks in USB HID protocol dissector's
parse_report_descriptorfunction can lead to memory exhaustion (bsc#1258907). - CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).
- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash (bsc#1258909).
Also libvirt was rebuilt against wireshark for the libvirt plugin.
- Record
SUSE-SU-2026:1169-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:13 |
before 4.4.1-1 | 4.4.1-1 |
wiresharkDebian:14 |
before 4.4.1-1 | 4.4.1-1 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 |
None known |
wiresharkopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 4.4.1-1.1 | 4.4.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-9780 is a high vulnerability (CVSS 7.8) in Wireshark, published October 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in wireshark 4.4.1-1.
References
wireshark.org/security/wnpa-sec-2024-12.html
gitlab.com/wireshark/wireshark/-/issues/20026
nvd.nist.gov/vuln/detail/CVE-2024-9780
github.com/advisories/GHSA-4rf2-7phj-4vwq
security-tracker.debian.org/tracker/CVE-2024-9780
Show 40 moreShow less
suse.com/support/update/announcement/2026/suse-su-20261169-1
bugzilla.suse.com/1231475
ubuntu.com/security/CVE-2024-9780
cve.org/CVERecord?id=CVE-2024-9780
lists.opensuse.org/archives/list/[email protected]/thread/HAGL6EF4LUUOYRTJ6Q7LQBM7W4SZFUQZ