Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-24479

HistoryFeb 21, 2024 - 7:15 p.m.

CVE-2024-24479

2024-02-2119:15:09

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

wireshark

cve-2024-24479

4.2.0

remote attacker

denial of service

disputed

vendor

unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

OSVersionArchitecturePackageVersionFilename
Debian12allwireshark< 4.0.11-1~deb12u1wireshark_4.0.11-1~deb12u1_all.deb
Debian11allwireshark< 3.4.10-0+deb11u1wireshark_3.4.10-0+deb11u1_all.deb
Debian10allwireshark< 2.6.20-0+deb10u4wireshark_2.6.20-0+deb10u4_all.deb
Debian999allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb
Debian13allwireshark< 4.2.5-2wireshark_4.2.5-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wireshark	< 4.0.11-1~deb12u1	wireshark_4.0.11-1~deb12u1_all.deb
Debian	11	all	wireshark	< 3.4.10-0+deb11u1	wireshark_3.4.10-0+deb11u1_all.deb
Debian	10	all	wireshark	< 2.6.20-0+deb10u4	wireshark_2.6.20-0+deb10u4_all.deb
Debian	999	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb
Debian	13	all	wireshark	< 4.2.5-2	wireshark_4.2.5-2_all.deb