CVE-2024-24478

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24478
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
CVSS

No CVSS.

References
Link Resource
https://gist.github.com/1047524396/e82c55147cd3cb62ef20cbdb0ec83694 Third Party Advisory
https://gist.github.com/1047524396/e82c55147cd3cb62ef20cbdb0ec83694 Third Party Advisory
https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a99406500726d3faaef Patch
https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a99406500726d3faaef Patch
https://gitlab.com/wireshark/wireshark/-/issues/19347 Issue Tracking Vendor Advisory
https://gitlab.com/wireshark/wireshark/-/issues/19347 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
History

14 Apr 2025, 12:54

Type Values Removed Values Added
First Time Wireshark
Wireshark wireshark
CPE cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
References () https://gitlab.com/wireshark/wireshark/-/issues/19347 - () https://gitlab.com/wireshark/wireshark/-/issues/19347 - Issue Tracking, Vendor Advisory
References () https://gist.github.com/1047524396/e82c55147cd3cb62ef20cbdb0ec83694 - () https://gist.github.com/1047524396/e82c55147cd3cb62ef20cbdb0ec83694 - Third Party Advisory
References () https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a99406500726d3faaef - () https://github.com/wireshark/wireshark/commit/80a4dc55f4d2fa33c2b36a99406500726d3faaef - Patch

23 Feb 2024, 08:15

Type Values Removed Values Added
Summary An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

21 Feb 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-21 17:15

Updated : 2025-04-14 12:54

NVD link : CVE-2024-24478

Mitre link : CVE-2024-24478

JSON object : View

Products Affected

wireshark

  • wireshark
CWE

No CWE.