ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
Weakness
The product does not initialize critical variables, which causes the execution environment to use unexpected values.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | 4.4.0 (including) | 4.4.0 (including) |
| Wireshark | Ubuntu | esm-apps/focal | * |
| Wireshark | Ubuntu | esm-apps/jammy | * |
| Wireshark | Ubuntu | esm-apps/noble | * |
| Wireshark | Ubuntu | focal | * |
| Wireshark | Ubuntu | jammy | * |
| Wireshark | Ubuntu | noble | * |
| Wireshark | Ubuntu | oracular | * |
| Wireshark | Ubuntu | trusty/esm | * |
| Wireshark | Ubuntu | upstream | * |