CVE-2018-18227

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.9 Wireshark versions 2.6.0 through 2.6.3

Description The issue is related to a NULL pointer dereference in the Wireshark program, which can cause a crash. This can be exploited by a remote attacker to cause a denial of service. The problem is associated with the MS-WSP protocol dissector.

Recommendations For Wireshark versions 2.4.0 through 2.4.9, update to a version where the MS-WSP protocol dissector properly handles NULL return values. For Wireshark versions 2.6.0 through 2.6.3, update to a version where the MS-WSP protocol dissector properly handles NULL return values.