7.8
CVE-2024-9780
- EPSS 0.02%
- Veröffentlicht 10.10.2024 07:15:03
- Zuletzt bearbeitet 17.10.2024 14:18:18
- Quelle cve@gitlab.com
- Teams Watchlist Login
- Unerledigt Login
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.02 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| cve@gitlab.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-456 Missing Initialization of a Variable
The product does not initialize critical variables, which causes the execution environment to use unexpected values.
CWE-909 Missing Initialization of Resource
The product does not initialize a critical resource.