CVE-2024-24476: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Affected products

• Fedoraproject Fedora: version 40 only
• Wireshark Wireshark: before 4.2.0 (fixed in 4.2.0)

Published 2024-02-21. Last modified 2026-06-17.