CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

CVE-2018-9263

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length...

CVE-2018-9261

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs...

CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources...

CVE-2018-9260

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs...

CVE-2018-9256

Wireshark CVE-2018-9256 affects the LWAPP dissector. Versions affected: 2.4.0–2.4.5 and 2.2.0–2.2.13. Root cause: recursion depth could be triggered by encapsulation levels, allowing a crash. Fix implemented in epan/dissectors/packet-lwapp.c by limiting encapsulation levels. Affected products: Wi...

CVE-2018-9259

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...

CVE-2018-9263

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length...

CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9264

CVE-2018-9264 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The ADB dissector could crash due to a heap-based buffer overflow. The root cause is a length inconsistency in the ADB dissector; the fix was implemented in epan/dissectors/packet-adb.c by adding a check for length inconsistencies to p...

CVE-2018-9260

CVE-2018-9260 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The IEEE 802.15.4 dissector could crash due to a missing allocation step; Wireshark fixed this in epan/dissectors/packet-ieee802154.c by ensuring an allocation step occurs. Reports from multiple vendors (e.g., SUSE/openSUSE advisories)...

CVE-2018-9257

CVE-2018-9257 affects Wireshark 2.4.0–2.4.5 where the CQL dissector could enter an infinite loop. The root cause, as documented, is in epan/dissectors/packet-cql.c, mitigated by adding a check for a nonzero number of columns. The vulnerability details are supported by the NVD entry and related ad...

CVE-2018-9261

The CVE-2018-9261 issue affects the NBAP dissector in Wireshark (versions 2.4.0–2.4.5 and 2.2.0–2.2.13). It crashes due to a large loop that can end in a heap-based buffer overflow; the root cause is the self-linking of DCH-IDs in packet-nbap.c. Mitigation: apply the vendor patch—Wireshark 2.2.14...

CVE-2018-9258

CVE-2018-9258 affects Wireshark 2.4.0–2.4.5 where the TCP dissector could crash; the issue was fixed by preserving valid data sources in epan/dissectors/packet-tcp.c. Related advisories (Debian DLA-1388-1, OpenVAS entries, and vendor advisories) confirm multiple Wireshark-related fixes and advise...

CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9264

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency...

CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources...

CVE-2018-9256

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...