In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Oct 31, 2018 | Oct 12, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 12, 2018 |
| Debian | — | Upgrade wireshark | Dec 28, 2018 | Oct 12, 2018 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4 | Nov 19, 2018 | Oct 12, 2018 |
| Suse | — | Upgrade libmaxminddb0-32bitUpgrade libwiretap10Upgrade libwsutil11Upgrade libwiretap7Upgrade libwireshark9Upgrade libwireshark13Upgrade libspandsp2-32bitUpgrade libmaxminddb0Upgrade spandsp-docUpgrade mmdblookupUpgrade libspandsp2Upgrade libmaxminddb-develUpgrade wireshark-gtkUpgrade spandsp-develUpgrade libwsutil8Upgrade wireshark-develUpgrade wireshark-ui-qtUpgrade wiresharkUpgrade libwscodecs1 | Oct 24, 2018 | Oct 12, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Oct 12, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.4.10Upgrade to Wireshark version 2.6.4 | Oct 15, 2018 | Oct 12, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub