CVE-2018-9257

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.5

Description The issue arises in the CQL dissector, which could enter an infinite loop. This was resolved by adding a check for a nonzero number of columns in the dissector code.

Recommendations For Wireshark versions 2.4.0 through 2.4.5, update to a version where the fix has been applied, specifically where the code in epan/dissectors/packet-cql.c has been modified to check for a nonzero number of columns.