| Max CVSS | 5.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-11358 | 5.0 |
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup.
|
20-03-2020 - 01:15 | 22-05-2018 - 21:29 | |
| CVE-2018-11362 | 5.0 |
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.
|
20-03-2020 - 01:15 | 22-05-2018 - 21:29 | |
| CVE-2018-9270 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak.
|
03-10-2019 - 00:03 | 04-04-2018 - 07:29 | |
| CVE-2018-9261 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs.
|
03-10-2019 - 00:03 | 04-04-2018 - 07:29 | |
| CVE-2018-9263 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length.
|
03-10-2019 - 00:03 | 04-04-2018 - 07:29 | |
| CVE-2018-9269 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak.
|
03-10-2019 - 00:03 | 04-04-2018 - 07:29 | |
| CVE-2018-9268 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak.
|
03-10-2019 - 00:03 | 04-04-2018 - 07:29 | |
| CVE-2018-9260 | 5.0 |
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs.
|
27-02-2019 - 17:16 | 04-04-2018 - 07:29 | |
| CVE-2018-9258 | 5.0 |
In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources.
|
26-02-2019 - 21:15 | 04-04-2018 - 07:29 |