PT-2018-18032

CVE-2018-7329

Published

2018-02-23

Updated

2024-06-15

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4

Description The issue is related to an infinite loop in the epan/dissectors/packet-s7comm.c file, caused by off-by-one errors.

Recommendations For Wireshark versions 2.2.0 through 2.2.12, update to a version that corrects the off-by-one errors to resolve the issue. For Wireshark versions 2.4.0 through 2.4.4, update to a version that corrects the off-by-one errors to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')

CWE-193: Off-by-one Error

Related identifiers

CVE-2018-7329

ALT-PU-2018-1290

ALT-PU-2018-2487