CVE-2024-9781
Improper Handling of Missing Values in Wireshark
7.8 HighFix available
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.31%Up 0.3 points since Oct 11, 2024
What each source reports
CVE List Score used
Improper Handling of Missing Values in Wireshark
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9781- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-230
- Updated
- 2026-11-02
EUVDEUVD-2024-50108
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2024-50108- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-752v-9q7h-jp65
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial...
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
GHSA-752v-9q7h-jp65- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-230
- Updated
- 2026-11-02
NVD
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9781- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-230
- Updated
- 2026-11-02
OSV
Improper Handling of Missing Values in Wireshark
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
CVE-2024-9781- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-230
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-9781
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2024-9781- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2024-9781
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2024-9781- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1775032927 No score
wireshark: Fix of 11 CVEs
- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
- CVE-2024-0208: fix crash in GVCP dissector due to NULL string
- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
- CVE-2024-0211: fix infinite loop in DOCSIS dissector
- CVE-2024-2955: fix use-after-free in T.38 dissector
- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
- CVE-2024-11596: fix buffer overflow in ECMP dissector
- CVE-2024-24476: fix heap buffer overflow in address resolution
- CVE-2024-24478: fix integer overflow in BGP dissector
- CVE-2025-5601: fix crash in column prepend fence handling
- Record
CLSA-2026-1775032927- Updated
- 2026-11-02
OSVCLSA-2026-1775039763 No score
wireshark: Fix of 11 CVEs
- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
- CVE-2024-0208: fix crash in GVCP dissector due to NULL string
- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
- CVE-2024-0211: fix infinite loop in DOCSIS dissector
- CVE-2024-2955: fix use-after-free in T.38 dissector
- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
- CVE-2024-11596: fix buffer overflow in ECMP dissector
- CVE-2024-24476: fix heap buffer overflow in address resolution
- CVE-2024-24478: fix integer overflow in BGP dissector
- CVE-2025-5601: fix crash in column prepend fence handling
- Record
CLSA-2026-1775039763- Updated
- 2026-11-02
OSVMGASA-2026-0184 No score
Updated wireshark packages fix security vulnerabilities
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code. This update fixes the reported issue.
- Record
MGASA-2026-0184- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14396-1 No score
libwireshark18-4.4.1-1.1 on GA media
These are all security issues fixed in the libwireshark18-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14396-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3615-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 4.2.8:
-
CVE-2024-9781: Fixed AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
-
Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html
- Record
SUSE-SU-2024:3615-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1169-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update Wireshark to version 4.6.4 (jsc#PED-15400).
- CVE-2024-9780: ITS dissector crash (bsc#1231475).
- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).
- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).
- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).
- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).
- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).
- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).
- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).
- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service (bsc#1254472).
- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).
- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).
- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).
- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).
- CVE-2026-3201: missing limit checks in USB HID protocol dissector's
parse_report_descriptorfunction can lead to memory exhaustion (bsc#1258907). - CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).
- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash (bsc#1258909).
Also libvirt was rebuilt against wireshark for the libvirt plugin.
- Record
SUSE-SU-2026:1169-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkTuxCare:AlmaLinux:9.6 From an advisory covering 11 CVEs |
before 1:3.4.10-7.el9_6.tuxcare.els2 | 1:3.4.10-7.el9_6.tuxcare.els2 |
wireshark-cliTuxCare:AlmaLinux:9.6 From an advisory covering 11 CVEs |
before 1:3.4.10-7.el9_6.tuxcare.els2 | 1:3.4.10-7.el9_6.tuxcare.els2 |
wireshark-develTuxCare:AlmaLinux:9.6 From an advisory covering 11 CVEs |
before 1:3.4.10-7.el9_6.tuxcare.els2 | 1:3.4.10-7.el9_6.tuxcare.els2 |
wiresharkTuxCare:AlmaLinux:9.2 From an advisory covering 11 CVEs |
before 1:3.4.10-4.el9.tuxcare.els3 | 1:3.4.10-4.el9.tuxcare.els3 |
wireshark-cliTuxCare:AlmaLinux:9.2 From an advisory covering 11 CVEs |
before 1:3.4.10-4.el9.tuxcare.els3 | 1:3.4.10-4.el9.tuxcare.els3 |
wireshark-develTuxCare:AlmaLinux:9.2 From an advisory covering 11 CVEs |
before 1:3.4.10-4.el9.tuxcare.els3 | 1:3.4.10-4.el9.tuxcare.els3 |
wiresharkDebian:12 |
before 4.0.17-0+deb12u2, plus listed versions 4.0.10-14.0.11-14.0.11-1~deb12u14.0.17-0+deb12u14.0.3-1 Show 6 moreShow less4.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1 |
4.0.17-0+deb12u2 |
wiresharkDebian:13 |
before 4.4.1-1 | 4.4.1-1 |
wiresharkDebian:14 |
before 4.4.1-1 | 4.4.1-1 |
wiresharkDebian:11 From an advisory covering 8 CVEs |
before 3.4.16-0+deb11u2, plus listed versions 3.4.10-0+deb11u13.4.16-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.16-0+deb11u2 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkMageia:9 From an advisory covering 21 CVEs |
before 4.0.17-1.2.mga9 | 4.0.17-1.2.mga9 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 4.2.8-150600.18.14.1 | 4.2.8-150600.18.14.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 4.2.8-150600.18.14.1 | 4.2.8-150600.18.14.1 |
wiresharkopenSUSE:Leap 15.6 |
before 4.2.8-150600.18.14.1 | 4.2.8-150600.18.14.1 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 |
None known |
wiresharkopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 4.4.1-1.1 | 4.4.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-9781 is a high vulnerability (CVSS 7.8) in Wireshark, published October 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in wireshark 4.0.17-0+deb12u2.
References
wireshark.org/security/wnpa-sec-2024-13.html
gitlab.com/wireshark/wireshark/-/issues/20114
nvd.nist.gov/vuln/detail/CVE-2024-9781
github.com/advisories/GHSA-752v-9q7h-jp65
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775032927.html
Show 50 moreShow less
security-tracker.debian.org/tracker/CVE-2024-9781
advisories.mageia.org/MGASA-2026-0184.html
bugs.mageia.org/show_bug.cgi?id=33641
lists.opensuse.org/archives/list/[email protected]/message/TDSVQBWNGPIXNB6DJ7GN3MKZXQIAMQNM
lists.fedoraproject.org/archives/list/[email protected]/message/7XDTIEL5AXYD7FSCLZTDTSH5DDELHHLL
lists.debian.org/debian-security-announce/2026/msg00160.html
suse.com/support/update/announcement/2024/suse-su-20243615-1
bugzilla.suse.com/1231476
ubuntu.com/security/CVE-2024-9781
cve.org/CVERecord?id=CVE-2024-9781