CVE-2024-24476 Denial of service in n/a
A remote attacker could cause a denial of service in Wireshark via a buffer overflow, though the vendor disputes the vulnerability's existence.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-24476?
CVE-2024-24476 is a high-severity denial of service vulnerability in Fedoraproject Fedora, published on 21 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
Weakness: CWE-119
Which versions are affected by CVE-2024-24476?
It affects 2 products.
Linux distribution packages (19)
wireshark SUSE:Enterprise Storage 7.1 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server 12 SP5 | All versions | 2.4.16-48.54.1 |
wireshark SUSE:Linux Enterprise Server 15 SP2-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 2.4.16-48.54.1 |
wireshark SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 2.4.16-48.54.1 |
wireshark SUSE:Manager Proxy 4.3 | All versions | 3.6.22-150000.3.112.1 |
wireshark SUSE:Manager Server 4.3 | All versions | 3.6.22-150000.3.112.1 |
wireshark openSUSE:Leap 15.5 | All versions | 3.6.22-150000.3.112.1 |
Products include Fedoraproject Fedora, Wireshark Wireshark.
How do I fix CVE-2024-24476?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-24476 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-24476 exists.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as AZL-44032, AZL-44619, GHSA-w4cp-wh3g-wgvx, SUSE-SU-2024:1347-1, SUSE-SU-2024:1354-1.