Every CVE Search/ Get API key

CVE-2024-24476

Buffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...

7.5 HighFix availableDisputed

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.30%Up 1.3 points since Feb 22, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
CVE-2024-24476
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2024-21895 7.5

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
EUVD-2024-21895
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w4cp-wh3g-wgvx 7.5

Buffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...

Buffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components.

Record
GHSA-w4cp-wh3g-wgvx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
NVD 7.5

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
CVE-2024-24476
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 7.5

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
CVE-2024-24476
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2242 7.5

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.(CVE-2024-24476)

SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file(CVE-2024-8645)

Record
OESA-2024-2242
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVAZL-44032 No score

CVE-2024-24476 affecting package wireshark 4.0.8-1

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
AZL-44032
Updated
2026-11-02
OSVAZL-44619 No score

CVE-2024-24476 affecting package wireshark for versions less than 4.4.7-1

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Record
AZL-44619
Updated
2026-11-02
OSVCLSA-2026-1775032927 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775032927
Updated
2026-11-02
OSVCLSA-2026-1775039763 No score

wireshark: Fix of 11 CVEs

  • CVE-2023-6175: fix heap buffer overflow in NetScreen file parser
  • CVE-2024-0208: fix crash in GVCP dissector due to NULL string
  • CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors
  • CVE-2024-0211: fix infinite loop in DOCSIS dissector
  • CVE-2024-2955: fix use-after-free in T.38 dissector
  • CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector
  • CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors
  • CVE-2024-11596: fix buffer overflow in ECMP dissector
  • CVE-2024-24476: fix heap buffer overflow in address resolution
  • CVE-2024-24478: fix integer overflow in BGP dissector
  • CVE-2025-5601: fix crash in column prepend fence handling
Record
CLSA-2026-1775039763
Updated
2026-11-02
OSVopenSUSE-SU-2024:14223-1 No score

libwireshark17-4.2.6-3.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.6-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14223-1
Updated
2026-11-02
OSVSUSE-SU-2024:1347-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Security fixes:

  • CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)

Other fixes:

Record
SUSE-SU-2024:1347-1
Updated
2026-11-02
OSVSUSE-SU-2024:1354-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

  • CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)
Record
SUSE-SU-2024:1354-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Azure Linux:2
 through 4.0.8-1 None known
wireshark
Azure Linux:3
 before 4.4.7-1
4.4.7-1
wireshark
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-cli
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 11 CVEs
 before 1:3.4.10-7.el9_6.tuxcare.els2
1:3.4.10-7.el9_6.tuxcare.els2
wireshark
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-cli
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 11 CVEs
 before 1:3.4.10-4.el9.tuxcare.els3
1:3.4.10-4.el9.tuxcare.els3
wireshark
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 3.6.14-11.oe2203sp3
3.6.14-11.oe2203sp3
wireshark
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.6.14-11.oe2003sp4
3.6.14-11.oe2003sp4
Show 23 moreShow less
Affected packages
PackageAffectedFixed
wireshark
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.6.14-11.oe2203sp1
3.6.14-11.oe2203sp1
wireshark
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 3.6.14-12.oe2403
3.6.14-12.oe2403
wireshark
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.6.14-11.oe2203sp4
3.6.14-11.oe2203sp4
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Manager Proxy 4.3
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Manager Server 4.3
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Enterprise Storage 7.1
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
openSUSE:Leap 15.5
 before 3.6.22-150000.3.112.1
3.6.22-150000.3.112.1
wireshark
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 2.4.16-48.54.1
2.4.16-48.54.1
wireshark
SUSE:Linux Enterprise Server 12 SP5
 before 2.4.16-48.54.1
2.4.16-48.54.1
wireshark
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.4.16-48.54.1
2.4.16-48.54.1
wireshark
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 4.2.6-3.1
4.2.6-3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-24476 is a high vulnerability (CVSS 7.5) in Wireshark, published February 21, 2024. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. Fixed in wireshark 4.4.7-1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open