In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | May 3, 2018 | Apr 4, 2018 |
| Debian | — | Upgrade wireshark | Feb 20, 2019 | Apr 4, 2018 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 2.4.6-0.175.3.32.0.2.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 2.4.6-0.175.3.32.0.2.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 2.4.6-0.175.3.32.0.2.0 on Solaris 11.3 | May 16, 2018 | Apr 4, 2018 |
| Suse | — | Upgrade libwireshark13Upgrade libwireshark9Upgrade libwsutil8Upgrade wireshark-develUpgrade wiresharkUpgrade libwscodecs1Upgrade libwiretap7Upgrade libwsutil7Upgrade wireshark-ui-qtUpgrade libwireshark8Upgrade libwiretap6Upgrade libwsutil11Upgrade wireshark-gtkUpgrade libwiretap10 | Apr 11, 2018 | Apr 4, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Apr 4, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.2.14Upgrade to Wireshark version 2.4.6 | Apr 25, 2018 | Apr 4, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub