Unrated

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN...

CVE-2018-9262 First seen on SecPulse Apr 4, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2018-9262 wireshark Fixed in: 2.2.14-r0
Debian DEBIAN-CVE-2018-9262 wireshark Fixed in: 2.4.6-1

Original description The description as published by the source.

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory lists.debian.org
advisory wireshark.org
report bugs.wireshark.org
web code.wireshark.org

Key facts

Severity: Unrated
Published: Apr 4, 2018
First seen on SecPulse: Apr 4, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50