CVE-2024-0207: 
Wireshark vulnerability analysis and mitigation

The vulnerability CVE-2024-0207 affects Wireshark version 4.2.0, specifically in its HTTP3 dissector component. The flaw was discovered by Dexter Gerig and publicly disclosed on January 3, 2024. The vulnerability allows for a denial of service condition through either packet injection or by using a crafted capture file (Wireshark Advisory, NVD).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) issue. The flaw exists in the HTTP3 dissector's QPACK stream parsing functionality, specifically in the read_qpack_prefixed_integer function. The issue occurs due to insufficient bounds checking in dissect_http3_qpack_encoder_stream where the decoded value is incremented without proper buffer boundary verification (GitLab Issue). The vulnerability has received a CVSS v3.1 base score of 7.5 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can cause Wireshark to crash, resulting in a denial of service condition. This can be triggered either by injecting malformed packets into the network or by convincing a user to open a specially crafted packet capture file (Wireshark Advisory).

The vulnerability has been fixed in Wireshark version 4.2.1. Users are advised to upgrade to this version or later to mitigate the risk. No alternative workarounds have been published (Wireshark Advisory).