A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24479 advisory.

  - A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because     neither release 4.2.0 nor any other release was affected. (CVE-2024-24479)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-837 advisory.

    ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

    Buffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause     a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. (CVE-2024-24479)

    NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via     packet injection or crafted capture file (CVE-2024-8250)

    SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet     injection or crafted capture file (CVE-2024-8645)

    AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of     service via packet injection or crafted capture file (CVE-2024-9781)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4115ab9959 advisory.

    New version 4.2.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
296201	Azure Linux 3.0 Security Update: wireshark (CVE-2024-24479)	Nessus	Azure Linux Local Security Checks	high
215035	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2025-837)	Nessus	Amazon Linux Local Security Checks	high
194530	Fedora 40 : wireshark (2024-4115ab9959)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-24479

high

Tenable Plugins

high

high

high