CVE-2024-24479

2024-02-2100:00:00

ubuntu.com

buffer overflow

wireshark

denial of service

remote attacker

wsutil/to_str.c

format_fractional_part_nsecs

vendor dispute

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

DISPUTED A Buffer Overflow in Wireshark before 4.2.0 allows a remote
attacker to cause a denial of service via the wsutil/to_str.c, and
format_fractional_part_nsecs components. NOTE: this is disputed by the
vendor because neither release 4.2.0 nor any other release was affected.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchwireshark< anyUNKNOWN
ubuntu20.04noarchwireshark< anyUNKNOWN
ubuntu22.04noarchwireshark< anyUNKNOWN
ubuntu23.10noarchwireshark< anyUNKNOWN
ubuntu24.04noarchwireshark< anyUNKNOWN
ubuntu14.04noarchwireshark< anyUNKNOWN
ubuntu16.04noarchwireshark< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	wireshark	< any	UNKNOWN
ubuntu	20.04	noarch	wireshark	< any	UNKNOWN
ubuntu	22.04	noarch	wireshark	< any	UNKNOWN
ubuntu	23.10	noarch	wireshark	< any	UNKNOWN
ubuntu	24.04	noarch	wireshark	< any	UNKNOWN
ubuntu	14.04	noarch	wireshark	< any	UNKNOWN
ubuntu	16.04	noarch	wireshark	< any	UNKNOWN