CVE-2024-24479: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Affected products

• Fedoraproject Fedora: version 40 only
• Wireshark Wireshark: before 4.2.0 (fixed in 4.2.0)

Published 2024-02-21. Last modified 2026-06-17.