{"id":"CVE-2024-24478","aliases":["AZL-43822","AZL-44853","CLSA-2026-1775032927","CLSA-2026-1775039763","EUVD-2024-21897","GHSA-q2p3-j458-f7vv"],"status":"disputed","title":"An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of...","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00979,"percentile":0.62638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-680"],"published":"2024-02-21T00:00:00Z","modified":"2026-10-28T10:40:23Z","fixes":[{"ecosystem":"Azure Linux:3","package":"wireshark","fixed_in":["4.4.7-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.0.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11}],"products":[{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a99406500726d3faaef","tags":["x_transferred","Patch","fix"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/19347","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://gist.github.com/1047524396/e82c55147cd3cb62ef20cbdb0ec83694","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24478","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-q2p3-j458-f7vv"},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775032927.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775039763.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24478.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-24478","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"disputed","published":"2024-02-21T00:00:00Z","modified":"2024-08-01T23:19:52.89Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-680"],"updated_at":"2026-11-02T14:34:13.991836Z"}],"euvd":[{"id":"EUVD-2024-21897","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"published","published":"2024-02-21T00:00:00Z","modified":"2024-08-01T23:19:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:28.835632Z"}],"ghsa":[{"id":"GHSA-q2p3-j458-f7vv","title":"An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of...","description":"An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components.","status":"published","published":"2024-02-21T18:31:02Z","modified":"2024-08-01T15:32:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-680"],"updated_at":"2026-11-02T14:57:47.54071Z"}],"nvd":[{"id":"CVE-2024-24478","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"disputed","published":"2024-02-21T17:15:09.567Z","modified":"2026-06-17T07:14:31.52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-680"],"updated_at":"2026-11-02T14:09:37.655131Z"}],"osv":[{"id":"CVE-2024-24478","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"published","published":"2024-02-21T00:00:00Z","modified":"2026-10-28T10:40:23.615075548Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"AZL-43822","title":"CVE-2024-24478 affecting package wireshark 4.0.8-1","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"published","published":"2024-02-21T17:15:09Z","modified":"2026-04-21T04:31:10.219723Z","updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44853","title":"CVE-2024-24478 affecting package wireshark for versions less than 4.4.7-1","description":"An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.","status":"published","published":"2024-02-21T17:15:09Z","modified":"2026-04-21T04:54:47.451128Z","updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"CLSA-2026-1775032927","title":"wireshark: Fix of 11 CVEs","description":"- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser\n- CVE-2024-0208: fix crash in GVCP dissector due to NULL string\n- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors\n- CVE-2024-0211: fix infinite loop in DOCSIS dissector\n- CVE-2024-2955: fix use-after-free in T.38 dissector\n- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector\n- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors\n- CVE-2024-11596: fix buffer overflow in ECMP dissector\n- CVE-2024-24476: fix heap buffer overflow in address resolution\n- CVE-2024-24478: fix integer overflow in BGP dissector\n- CVE-2025-5601: fix crash in column prepend fence handling","status":"published","published":"2026-04-01T08:42:11Z","modified":"2026-10-21T10:47:27.597665824Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775039763","title":"wireshark: Fix of 11 CVEs","description":"- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser\n- CVE-2024-0208: fix crash in GVCP dissector due to NULL string\n- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors\n- CVE-2024-0211: fix infinite loop in DOCSIS dissector\n- CVE-2024-2955: fix use-after-free in T.38 dissector\n- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector\n- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors\n- CVE-2024-11596: fix buffer overflow in ECMP dissector\n- CVE-2024-24476: fix heap buffer overflow in address resolution\n- CVE-2024-24478: fix integer overflow in BGP dissector\n- CVE-2025-5601: fix crash in column prepend fence handling","status":"published","published":"2026-04-01T10:36:08Z","modified":"2026-10-21T10:46:21.842332536Z","updated_at":"2026-11-02T15:43:44.009773Z"}]}}