Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Randstr

#32176of 53,619
7.8Total CVSS
Vulnerabilities · 1
PT-2024-1846
7.8
2024-02-21
Wireshark · Wireshark · CVE-2024-24476
**Name of the Vulnerable Software and Affected Versions** Wireshark versions prior to 4.2.0 **Description** The issue is related to a buffer overflow in the pan/addr resolv.c component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. The `ws manuf lookup str()` function and size components are involved in this issue. It is noted that the vendor disputes the claim, stating that neither release 4.2.0 nor any other release was affected. **Recommendations** For Wireshark versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `pan/addr resolv.c` component and the `ws manuf lookup str()` function until a patch is available.