CVE-2024-24476: 
Wireshark vulnerability analysis and mitigation

CVE-2024-24476 is a reported buffer overflow vulnerability in Wireshark that was initially claimed to affect versions before 4.2.0. The vulnerability was reported to exist in the pan/addr_resolv.c file, specifically in the ws_manuf_lookup_str() function. However, this vulnerability claim is disputed by the vendor, who states that neither release 4.2.0 nor any other release was affected (CVE-MITRE).

The vulnerability was initially reported as a heap buffer overflow issue in the ws_manuf_lookup_str() function within the pan/addr_resolv.c component. A fix was implemented to ensure that at least 6 bytes are always passed to ws_manuf_lookup_str() (GITHUB-COMMIT). The issue was discovered through OSS-Fuzz testing, which identified a potential 6-byte-read-heap-buffer-overflow (GITLAB-ISSUE).

The vulnerability was initially reported to potentially allow a remote attacker to cause a denial of service condition (NVD). However, given the vendor's dispute of the vulnerability, the actual impact appears to be negligible.

While initially reported as requiring an upgrade to version 4.2.0 or later, the vendor's dispute indicates that no specific mitigation is necessary as the vulnerability does not affect any released version (CVE-MITRE).