CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9260

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs...

CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources...

CVE-2018-9264

CVE-2018-9264 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The ADB dissector could crash due to a heap-based buffer overflow. The root cause is a length inconsistency in the ADB dissector; the fix was implemented in epan/dissectors/packet-adb.c by adding a check for length inconsistencies to p...

CVE-2018-9263

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length...

CVE-2018-9261

The CVE-2018-9261 issue affects the NBAP dissector in Wireshark (versions 2.4.0–2.4.5 and 2.2.0–2.2.13). It crashes due to a large loop that can end in a heap-based buffer overflow; the root cause is the self-linking of DCH-IDs in packet-nbap.c. Mitigation: apply the vendor patch—Wireshark 2.2.14...

CVE-2018-9258

CVE-2018-9258 affects Wireshark 2.4.0–2.4.5 where the TCP dissector could crash; the issue was fixed by preserving valid data sources in epan/dissectors/packet-tcp.c. Related advisories (Debian DLA-1388-1, OpenVAS entries, and vendor advisories) confirm multiple Wireshark-related fixes and advise...

CVE-2018-9256

Wireshark CVE-2018-9256 affects the LWAPP dissector. Versions affected: 2.4.0–2.4.5 and 2.2.0–2.2.13. Root cause: recursion depth could be triggered by encapsulation levels, allowing a crash. Fix implemented in epan/dissectors/packet-lwapp.c by limiting encapsulation levels. Affected products: Wi...

CVE-2018-9260

CVE-2018-9260 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The IEEE 802.15.4 dissector could crash due to a missing allocation step; Wireshark fixed this in epan/dissectors/packet-ieee802154.c by ensuring an allocation step occurs. Reports from multiple vendors (e.g., SUSE/openSUSE advisories)...

CVE-2018-9257

CVE-2018-9257 affects Wireshark 2.4.0–2.4.5 where the CQL dissector could enter an infinite loop. The root cause, as documented, is in epan/dissectors/packet-cql.c, mitigated by adding a check for a nonzero number of columns. The vulnerability details are supported by the NVD entry and related ad...

CVE-2018-9259

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...

CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9257

In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns...

CVE-2018-9262

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth...

CVE-2018-9264

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency...

CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources...

CVE-2018-9256

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth...

Wireshark Denial of Service Vulnerability (CNVD-2018-07441)

Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.MP4 dissector is one of the MP4 video format parsers. A security vulnerability...

Wireshark epan/dissectors/packet-tn3270.c file memory leak vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-tn3270.c file in Wireshark...