NTLMSSP Dissector Denial of Service Vulnerability

CVE-2024-8250

What is CVE-2024-8250?

A vulnerable NTLMSSP dissector in Wireshark versions 4.2.0 through 4.0.6 and 4.0.0 through 4.0.16 can lead to a potential denial of service. This vulnerability allows attackers to exploit the software by injecting specially crafted packets or using malicious capture files, causing the application to crash. Network administrators using these versions should take precautions to mitigate this risk and update to secure versions.

References