Unrated

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2....

CVE-2018-14369 First seen on SecPulse Jul 19, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-14369 wireshark Fixed in: 2.6.2-1

Original description The description as published by the source.

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory securityfocus.com
advisory securitytracker.com
advisory lists.debian.org
advisory wireshark.org
report bugs.wireshark.org
web lists.opensuse.org
web code.wireshark.org

Key facts

Severity: Unrated
Published: Jul 19, 2018
First seen on SecPulse: Jul 19, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49