CVE-2018-14343

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1

Description The issue concerns a potential crash in the ASN.1 BER dissector. This crash could occur due to length values exceeding the maximum signed integer. The problem was resolved by modifying the epan/dissectors/packet-ber.c file to prevent such overflows.

Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version where the fix has been applied. For Wireshark versions 2.4.0 through 2.4.7, update to a version where the fix has been applied. For Wireshark versions 2.6.0 through 2.6.1, update to a version where the fix has been applied.