A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24476 advisory.

  - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor     because neither release 4.2.0 nor any other release was affected. (CVE-2024-24476)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor     because neither release 4.2.0 nor any other release was affected. (CVE-2024-24476)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the wireshark package has been released.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4115ab9959 advisory.

    New version 4.2.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1354-1 advisory.

    - CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1347-1 advisory.

    Security fixes:

    - CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)

    Other fixes:

    - Wireshark 3.6.22:
    - Further features, bug fixes and updated protocol support as listed in:
      https://www.wireshark.org/docs/relnotes/wireshark-3.6.22.html

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
296084	Azure Linux 3.0 Security Update: wireshark (CVE-2024-24476)	Nessus	Azure Linux Local Security Checks	high
228160	Linux Distros Unpatched Vulnerability : CVE-2024-24476	Nessus	Misc.	high
206649	Photon OS 5.0: Wireshark PHSA-2024-5.0-0364	Nessus	PhotonOS Local Security Checks	medium
206647	Photon OS 4.0: Wireshark PHSA-2024-4.0-0683	Nessus	PhotonOS Local Security Checks	medium
194530	Fedora 40 : wireshark (2024-4115ab9959)	Nessus	Fedora Local Security Checks	high
193656	SUSE SLES12: libwireshark9 / libwiretap7 / libwscodecs1 / libwsutil8 / wireshark / etc (SUSE-SU-2024:1354-1)	Nessus	SuSE Local Security Checks	high
193654	SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2024:1347-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-24476

high

Tenable Plugins

high

high

medium

medium

high

high

high