CVE-2018-9260
CVE-2018-9260
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs.
CVSS 7.5 · High · EPSS 2.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=14d6f717d8ea27688af48532edb1d29f502ea8f0
- https://www.wireshark.org/security/wnpa-sec-2018-17.html
- https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html
- https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14468
- https://nvd.nist.gov/vuln/detail/CVE-2018-9260