Wireshark · Wireshark · CVE-2024-24476
**Name of the Vulnerable Software and Affected Versions**
Wireshark versions prior to 4.2.0
**Description**
The issue is related to a buffer overflow in the pan/addr resolv.c component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. The `ws manuf lookup str()` function and size components are involved in this issue. It is noted that the vendor disputes the claim, stating that neither release 4.2.0 nor any other release was affected.
**Recommendations**
For Wireshark versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue.
As a temporary workaround, consider restricting access to the `pan/addr resolv.c` component and the `ws manuf lookup str()` function until a patch is available.