CVE-2024-8250

Description

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

Affected Platforms

Weakness Type

CWE-825, CWE-787

References

• https://gitlab.com/wireshark/wireshark/-/issues/19943
• https://www.wireshark.org/security/wnpa-sec-2024-11.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html