CVE Vulnerabilities

CVE-2024-11595

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Nov 21, 2024 | Modified: May 07, 2025
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
5.5 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

NameVendorStart VersionEnd Version
WiresharkWireshark4.2.0 (including)4.2.9 (excluding)
WiresharkWireshark4.4.0 (including)4.4.2 (excluding)
WiresharkUbuntuesm-apps/noble*
WiresharkUbuntunoble*
WiresharkUbuntuoracular*
WiresharkUbuntutrusty/esm*
WiresharkUbuntuupstream*

References