Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-24476

HistoryFeb 21, 2024 - 7:15 p.m.

CVE-2024-24476

2024-02-2119:15:09

Debian Security Bug Tracker

security-tracker.debian.org

wireshark

buffer overflow

cve-2024-24476

denial of service

unix

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

OSVersionArchitecturePackageVersionFilename
Debian12allwireshark< 4.0.11-1~deb12u1wireshark_4.0.11-1~deb12u1_all.deb
Debian11allwireshark< 3.4.10-0+deb11u1wireshark_3.4.10-0+deb11u1_all.deb
Debian10allwireshark< 2.6.20-0+deb10u4wireshark_2.6.20-0+deb10u4_all.deb
Debian999allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb
Debian13allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wireshark	< 4.0.11-1~deb12u1	wireshark_4.0.11-1~deb12u1_all.deb
Debian	11	all	wireshark	< 3.4.10-0+deb11u1	wireshark_3.4.10-0+deb11u1_all.deb
Debian	10	all	wireshark	< 2.6.20-0+deb10u4	wireshark_2.6.20-0+deb10u4_all.deb
Debian	999	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb
Debian	13	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb