CVE-2024-24478: Wireshark

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Affected products

• Wireshark Wireshark: before 4.2.0 (fixed in 4.2.0)

Published 2024-02-21. Last modified 2026-06-17.