CVE-2024-24478

HIGH

Wireshark < 4.2.0 - Denial of Service via BGP Packet Dissection

Title source: llm
STIX 2.1

Description

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

References (3)

Core 3

Scores

CVSS v3 7.5
EPSS 0.0098
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-680
Status published
Products (1)
wireshark/wireshark < 4.2.0
Published Feb 21, 2024
Tracked Since Feb 18, 2026