CVE-2018-19628

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.4

Description The issue concerns a crash in the ZigBee ZCL dissector, which could be triggered by an attacker, leading to a denial-of-service condition. This was caused by a divide-by-zero error. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Wireshark versions 2.6.0 through 2.6.4, update the epan/dissectors/packet-zbee-zcl-lighting.c file to prevent the divide-by-zero error, as addressed in the updated version.