{
  "cveId": "CVE-2024-0207",
  "url": "https://patchblox.com/security/cve/CVE-2024-0207",
  "summary": "CVE-2024-0207 is fixed in wireshark on 1 platform, first by DEBIAN-CVE-2024-0207, released January 3, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "wireshark: This update for wireshark fixes the following issues:\n\nwireshark was updated from version 3.6.23 to version 4.2.6 (js...",
  "description": "This update for wireshark fixes the following issues:\n\nwireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):\n\n- Security issues fixed with this update:\n\n  * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)\n  * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)\n  * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)\n  * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)\n  * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)\n  * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)\n  * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)\n  * CVE-2023-2854: BLF file parser crash (bsc#1211708)\n  * CVE-2023-0666: RTPS dissector crash (bsc#1211709)\n  * CVE-2023-0414: EAP dissector crash (bsc#1207666)\n\n- Major changes introduced with versions 4.2.0 and 4.0.0:\n\n  * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html\n  * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html\n\n- Added an aditional desktopfile to start wireshark which asks for\n  the super user password.",
  "published": "2024-01-03T08:15:10Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00466,
  "epssPercentile": 0.40584,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.2.2-1",
      "fix": "DEBIAN-CVE-2024-0207",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-0207",
      "released": "2024-01-03T08:15:10Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 14",
      "fixedVersion": "4.2.2-1",
      "fix": "DEBIAN-CVE-2024-0207",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-0207",
      "released": "2024-01-03T08:15:10Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "4.2.6-150600.18.6.1",
      "fix": "SUSE-SU-2024:3165-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3165-1",
      "released": "2024-09-09T07:25:24Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "sles 15.6",
      "fixedVersion": "4.2.6-150600.18.6.1",
      "fix": "SUSE-SU-2024:3165-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3165-1",
      "released": "2024-09-09T07:25:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}