A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

An update of the wireshark package has been released.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: free operation on an uninitialized memory address in wiretap/netmon.c (CVE-2018-6836)

  - The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x     before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a     denial of service (application crash) via a crafted packet. (CVE-2014-2907)

  - The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark     1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to     represent an error condition, which allows remote attackers to cause a denial of service (application     crash) via a crafted packet. (CVE-2014-4020)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: free operation on an uninitialized memory address in wiretap/netmon.c (CVE-2018-6836)

  - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was     addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks. (CVE-2018-5334)

  - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in     epan/dissectors/packet-wcp.c by validating the available buffer length. (CVE-2018-5335)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: Kafka dissector infinite loop (CVE-2021-4190)

  - wireshark: ISO 15765 and ISO 10681 dissector crash (CVE-2023-1161)

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4115ab9959 advisory.

  - A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because     neither release 4.2.0 nor any other release was affected. (CVE-2024-24479)

  - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor     because neither release 4.2.0 nor any other release was affected. (CVE-2024-24476)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1354-1 advisory.

  - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor     because neither release 4.2.0 nor any other release was affected. (CVE-2024-24476)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1347-1 advisory.

  - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the     pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor     because neither release 4.2.0 nor any other release was affected. (CVE-2024-24476)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206649	Photon OS 5.0: Wireshark PHSA-2024-5.0-0364	Nessus	PhotonOS Local Security Checks	medium
206647	Photon OS 4.0: Wireshark PHSA-2024-4.0-0683	Nessus	PhotonOS Local Security Checks	medium
199503	RHEL 7 : wireshark (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199495	RHEL 8 : wireshark (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199485	RHEL 9 : wireshark (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
194530	Fedora 40 : wireshark (2024-4115ab9959)	Nessus	Fedora Local Security Checks	high
193656	SUSE SLES12 Security Update : wireshark (SUSE-SU-2024:1354-1)	Nessus	SuSE Local Security Checks	high
193654	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2024:1347-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-24476

high

Tenable Plugins

medium

medium

critical

critical

high

high

high

high