CVE-2018-7320

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets...

CVE-2018-7419

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization...

CVE-2018-7418

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value...

CVE-2018-7337

CVE-2018-7337 affects Wireshark 2.4.0–2.4.4, where the DOCSIS protocol dissector could crash. The root cause was a recursive algorithm used for concatenated PDUs in plugins/docsis/packet-docsis.c. The issue was addressed by removing that recursive approach, mitigating the crash vector. Connected ...

CVE-2018-7335

Wireshark CVE-2018-7335 affects the IEEE 802.11 dissector in Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. The root cause is in the dissector logic that could crash when processing certain packets; the fix was implemented in epan/crypt/airpdcap.c by rejecting lengths that are too small. Affected versio...

CVE-2018-7335

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small...

CVE-2018-7417

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header...

CVE-2018-7320

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets...

CVE-2018-7335

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small...

CVE-2018-7320

Wireshark SIGCOMP dissector vulnerability CVE-2018-7320: affected Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12; crash caused by missing validation of operand offsets in packet-sigcomp.c. Exploitation via malformed packets may crash the dissector; no explicit exploitation details provided. The issue is ...

CVE-2018-7417

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header...

CVE-2018-7419

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization...

CVE-2018-7421

CVE-2018-7421 affects Wireshark 2.2.0–2.2.12 and 2.4.0–2.4.4, where the DMP dissector could loop indefinitely. The issue was mitigated in epan/dissectors/packet-dmp.c by enforcing a bounded number of Security Categories for a DMP Security Classification. Publicly documented impact is an infinite-...

CVE-2018-7418

CVE-2018-7418 – Wireshark SIGCOMP dissector crash . The SIGCOMP dissector in Wireshark (versions 2.2.0–2.2.12 and 2.4.0–2.4.4) could crash due to an incorrect extraction of the length value. The issue was addressed in epan/dissectors/packet-sigcomp.c by correcting the length value extraction, mit...

CVE-2018-7417

CVE-2018-7417 affects Wireshark 2.2.0–2.2.12 and 2.4.0–2.4.4, where the IPMI dissector could crash due to crafted packets, including those that lack an IPMI header. The issue enables a denial-of-service effect (crash) and is described as triggered by malformed packets or traces. The root cause is...

CVE-2018-7421

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification...

CVE-2018-7418

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value...

CVE-2018-7334

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umtsmac.c by rejecting a certain reserved value...

KLA11201 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...

EulerOS 2.0 SP2 : wireshark (EulerOS-SA-2018-1042)

According to the version of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by...