CVE-2018-14340

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1

Description The issue concerns dissectors that support zlib decompression, which could crash due to a buffer over-read when encountering negative lengths. This was addressed by rejecting negative lengths.

Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix in epan/tvbuff zlib.c. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix in epan/tvbuff zlib.c. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix in epan/tvbuff zlib.c.