Wireshark · Wireshark · CVE-2024-0209
**Name of the Vulnerable Software and Affected Versions**
Wireshark versions 3.6.0 through 3.6.19
Wireshark versions 4.0.0 through 4.0.11
Wireshark version 4.2.0
**Description**
The issue is related to the IEEE 1609.2 dissector in Wireshark, which can cause a crash, allowing denial of service via packet injection or crafted capture file. This is due to errors in pointer handling. A remote attacker can exploit this issue to cause a denial of service.
**Recommendations**
For Wireshark versions 3.6.0 through 3.6.19, update to a newer version to resolve the issue.
For Wireshark versions 4.0.0 through 4.0.11, update to a newer version to resolve the issue.
For Wireshark version 4.2.0, update to a newer version to resolve the issue.
As a temporary workaround, consider disabling the IEEE 1609.2 dissector until a patch is available.