ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
Solution:
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://www.wireshark.org/security/wnpa-sec-2024-15.html | vendor advisory |
| https://gitlab.com/wireshark/wireshark/-/issues/20214 | exploit issue tracking permissions required |