An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775039763 advisory.

  - NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via     crafted capture file (CVE-2023-6175)

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775032927 advisory.

  - NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via     crafted capture file (CVE-2023-6175)

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775032927 advisory.

  - NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via     crafted capture file (CVE-2023-6175)

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24478 advisory.

  - An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-     bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this     is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
    (CVE-2024-24478)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-567 advisory.

    An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of service     via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen     components. (CVE-2024-24478)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
361844	AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775039763)	Nessus	Alma Linux Local Security Checks	Local	high
351913	Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775032927)	Nessus	Rocky Linux Local Security Checks	Local	high
351896	AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775032927)	Nessus	Alma Linux Local Security Checks	Local	high
295528	Azure Linux 3.0 Security Update: wireshark (CVE-2024-24478)	Nessus	Azure Linux Local Security Checks	Local	high
192443	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2024-567)	Nessus	Amazon Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2024-24478

high

Tenable Plugins

high

high

high

high

high