{
  "cveId": "CVE-2024-4854",
  "url": "https://patchblox.com/security/cve/CVE-2024-4854",
  "summary": "CVE-2024-4854 is fixed in 5 products on 1 platform, first by DEBIAN-CVE-2024-4854, released May 14, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "wireshark: MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow...",
  "description": "MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file",
  "published": "2024-05-14T15:45:18Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00811,
  "epssPercentile": 0.57185,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "4.0.17-0\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2024-4854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-4854",
      "released": "2024-05-14T15:45:18Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.2.5-1",
      "fix": "DEBIAN-CVE-2024-4854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-4854",
      "released": "2024-05-14T15:45:18Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "Debian 14",
      "fixedVersion": "4.2.5-1",
      "fix": "DEBIAN-CVE-2024-4854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-4854",
      "released": "2024-05-14T15:45:18Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.6.23-150600.18.3.1",
      "fix": "SUSE-SU-2024:2265-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2265-1",
      "released": "2024-07-02T08:14:42Z"
    },
    {
      "platform": "linux",
      "product": "wireshark",
      "release": "sles 15.6",
      "fixedVersion": "3.6.23-150600.18.3.1",
      "fix": "SUSE-SU-2024:2265-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2265-1",
      "released": "2024-07-02T08:14:42Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-cli",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.15-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-673",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-673",
      "released": "2024-07-18T01:25:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-cli-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.15-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-673",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-673",
      "released": "2024-07-18T01:25:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.15-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-673",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-673",
      "released": "2024-07-18T01:25:00Z"
    },
    {
      "platform": "linux",
      "product": "wireshark-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:4.0.15-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-673",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-673",
      "released": "2024-07-18T01:25:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}