Browse CVEs

HIGH 7.5 CVE-2018-14368 In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in… Wireshark after 2.6.1 Fix from $1,9502018-07-19 HIGH 7.5 CVE-2018-14369 In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2… Wireshark after 2.6.1 Fix from $1,9502018-07-19 HIGH 7.5 CVE-2018-14370 In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bound… Wireshark after 2.6.1 Fix from $1,9502018-07-19 HIGH 7.5 CVE-2018-11354 In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11355 In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet stat… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11356 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoidin… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11357 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11358 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoi… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11359 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by av… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11360 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dta… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11361 In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow dur… Wireshark Mitigation only Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11362 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoid… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-9265 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9266 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9267 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9268 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9269 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9270 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9271 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9272 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9273 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9274 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9256 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting th… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9257 In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a n… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9258 In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources. Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9259 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the b… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9260 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c b… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9261 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This w… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9262 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN… Wireshark after 2.4.5 Fix from $1,9502018-04-04 HIGH 7.5 CVE-2018-9263 In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensur… Wireshark after 2.4.5 Fix from $1,9502018-04-04