CVE-2018-19623

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.10 Wireshark versions 2.6.0 through 2.6.4

Description The issue is related to errors in handling input data in the LBMPDM dissector of the Wireshark network traffic analyzer. Exploitation of this issue could allow a remote attacker to cause a denial of service using a specially crafted packet or packet capture file. Additionally, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory.

Recommendations For Wireshark versions 2.4.0 through 2.4.10, update to a version where the LBMPDM dissector issue is addressed. For Wireshark versions 2.6.0 through 2.6.4, update to a version where the LBMPDM dissector issue is addressed. As a temporary workaround, consider disabling the LBMPDM dissector until a patch is available.