PT-2024-8606 · Wireshark+5 · Wireshark+5

Published 2024-10-29 · Updated 2026-04-02 · CVE-2024-11595

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.8 Wireshark versions 4.4.0 through 4.4.1

Description The issue is related to the FiveCo RAP dissector in Wireshark, which can enter an infinite loop. This can be exploited to cause a denial of service by injecting specially crafted packets or using a crafted capture file.

Recommendations For Wireshark versions 4.2.0 through 4.2.8, consider disabling the FiveCo RAP dissector until a patch is available. For Wireshark versions 4.4.0 through 4.4.1, consider disabling the FiveCo RAP dissector until a patch is available. As a temporary workaround, avoid using the FiveCo RAP dissector in Wireshark until the issue is resolved.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALT-PU-2025-1412

ALT-PU-2025-3923

BDU:2024-10175

CVE-2024-11595

OPENSUSE-SU-2024:14529-1

OPENSUSE-SU-2024_4142-1

SUSE-SU-2024:4142-1

SUSE-SU-2024_4142-1

SUSE-SU-2026:1169-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Suse

Wireshark

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11595.json · Exploit
• https://bdu.fstec.ru/vul/2024-10175 · Security Note
• https://wireshark.org/security/wnpa-sec-2024-14.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-11595 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-11595 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-11595 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14529-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4142-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-11595 · Security Note
• https://ubuntu.com/security/CVE-2024-11595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11595 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-11595 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1169-1 · Vendor Advisory
• https://bugzilla.suse.com/1249090 · Note
• https://bugzilla.suse.com/1256734 · Note