CVE-2024-24478

2024-02-2117:15:09

Debian Security Bug Tracker

security-tracker.debian.org

wireshark

denial of service

bgp

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_ttvb, proto_treetree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

OSVersionArchitecturePackageVersionFilename
Debian12allwireshark< 4.0.11-1~deb12u1wireshark_4.0.11-1~deb12u1_all.deb
Debian11allwireshark< 3.4.10-0+deb11u1wireshark_3.4.10-0+deb11u1_all.deb
Debian999allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb
Debian13allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wireshark	< 4.0.11-1~deb12u1	wireshark_4.0.11-1~deb12u1_all.deb
Debian	11	all	wireshark	< 3.4.10-0+deb11u1	wireshark_3.4.10-0+deb11u1_all.deb
Debian	999	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb
Debian	13	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb