The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 1, 2018 | Jul 19, 2018 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Jul 19, 2018 |
| Suse | — | Upgrade libwscodecs1Upgrade libspandsp2-32bitUpgrade wiresharkUpgrade libwireshark13Upgrade wireshark-gtkUpgrade wireshark-develUpgrade libmaxminddb0Upgrade wireshark-ui-qtUpgrade libmaxminddb-develUpgrade mmdblookupUpgrade libwsutil11Upgrade libspandsp2Upgrade libwiretap10Upgrade spandsp-docUpgrade libmaxminddb0-32bitUpgrade libwsutil8Upgrade spandsp-develUpgrade libwireshark9Upgrade libwsutil7Upgrade libwireshark8Upgrade libwiretap7Upgrade libwiretap6 | Aug 4, 2018 | Jul 18, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Jul 19, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.4.8Upgrade to Wireshark version 2.6.2 | Jul 20, 2018 | Jul 18, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub