epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade wireshark | Apr 4, 2017 | Jun 9, 2013 |
| Centos_linux | — | Upgrade wireshark-gnomeUpgrade wiresharkUpgrade wireshark-debuginfoUpgrade wireshark-devel | Aug 28, 2019 | Jun 9, 2013 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Jun 9, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 29, 2015 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Jun 9, 2013 |
| Oracle_linux | — | Upgrade wiresharkUpgrade wireshark-develUpgrade wireshark-gnome | Mar 28, 2017 | Jun 9, 2013 |
| Redhat_linux | — | Upgrade wireshark-develUpgrade wireshark-debuginfoUpgrade wiresharkUpgrade wireshark-gnome | Mar 21, 2017 | Jun 9, 2013 |
| Suse | — | Upgrade wireshark-develUpgrade sle-sdk-releaseUpgrade wireshark | Dec 12, 2013 | Jun 9, 2013 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Jun 9, 2013 |
| Wireshark | — | Upgrade to Wireshark version 1.8.8 | Oct 4, 2017 | Jun 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub