CVE-2018-19625

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.10 Wireshark versions 2.6.0 through 2.6.4

Description The issue is related to a buffer over-read in memory, which could allow a remote attacker to cause a denial of service using a specially crafted packet. The dissection engine could crash due to a heap-based buffer over-read.

Recommendations For Wireshark versions 2.4.0 through 2.4.10, update to a version where the issue is addressed, such as by applying the fix in epan/tvbuff composite.c that prevents a heap-based buffer over-read. For Wireshark versions 2.6.0 through 2.6.4, update to a version where the issue is addressed, such as by applying the fix in epan/tvbuff composite.c that prevents a heap-based buffer over-read.