K000150337: Wireshark/tshark vulnerabilities CVE-2018-9262, CVE-2018-9260, CVE-2018-9259, CVE-2018-9258, and CVE-2018-9257

Security Advisory Description CVE-2018-9262 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth. CVE-2018-9260 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to...

Wireshark 4.0.x < 4.0.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.8 advisory. - Multiple integer signedness errors in the tvbunmasked function in epan/dissectors/packet-websocket.c in the...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)

This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...

CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

CVE-2018-9262

Wireshark VLAN dissector (CVE-2018-9262) affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. Root cause: crash due to unbounded VLAN tag nesting recursion in epan/dissectors/packet-vlan.c. Impact: vulnerability could cause a crash (partial availability) via crafted packets. Remediation: update to a r...

CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...