CVE-2018-7336

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4

Description The FCP protocol dissector could crash due to a NULL pointer. This issue was addressed by checking for a NULL pointer in epan/dissectors/packet-fcp.c.

Recommendations For Wireshark versions 2.2.0 through 2.2.12, update the epan/dissectors/packet-fcp.c file to include the NULL pointer check. For Wireshark versions 2.4.0 through 2.4.4, update the epan/dissectors/packet-fcp.c file to include the NULL pointer check. As a temporary workaround, consider disabling the FCP protocol dissector until a patch is available.