CVE-2024-24476

2024-02-2100:00:00

ubuntu.com

wireshark

buffer overflow

cve-2024-24476

denial of service

pan/addr_resolv.c

ws_manuf_lookup_str

vendor dispute

unix

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

DISPUTED A buffer overflow in Wireshark before 4.2.0 allows a remote
attacker to cause a denial of service via the pan/addr_resolv.c, and
ws_manuf_lookup_str(), size components. NOTE: this is disputed by the
vendor because neither release 4.2.0 nor any other release was affected.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchwireshark< anyUNKNOWN
ubuntu20.04noarchwireshark< anyUNKNOWN
ubuntu22.04noarchwireshark< anyUNKNOWN
ubuntu23.10noarchwireshark< anyUNKNOWN
ubuntu24.04noarchwireshark< anyUNKNOWN
ubuntu14.04noarchwireshark< anyUNKNOWN
ubuntu16.04noarchwireshark< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	wireshark	< any	UNKNOWN
ubuntu	20.04	noarch	wireshark	< any	UNKNOWN
ubuntu	22.04	noarch	wireshark	< any	UNKNOWN
ubuntu	23.10	noarch	wireshark	< any	UNKNOWN
ubuntu	24.04	noarch	wireshark	< any	UNKNOWN
ubuntu	14.04	noarch	wireshark	< any	UNKNOWN
ubuntu	16.04	noarch	wireshark	< any	UNKNOWN