CVE-2018-7325

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4

Description The issue is related to an infinite loop in the epan/dissectors/packet-rpki-rtr.c file. This was caused by a failure to validate a length field, which has been addressed.

Recommendations For Wireshark versions 2.2.0 through 2.2.12, update to a version that includes the validation of the length field to prevent the infinite loop. For Wireshark versions 2.4.0 through 2.4.4, update to a version that includes the validation of the length field to prevent the infinite loop.