epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Oct 4, 2012 |
| Freebsd | — | Upgrade tshark-liteUpgrade tsharkUpgrade wireshark-liteUpgrade wireshark | Dec 10, 2025 | Oct 22, 2012 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 1.8.3-0.175.1.3.0.1.0 on Solaris 11.1Upgrade diagnostic/wireshark/wireshark-common to version 1.8.3-0.175.1.3.0.1.0 on Solaris 11.1Upgrade diagnostic/wireshark to version 1.8.3-0.175.1.3.0.1.0 on Solaris 11.1 | May 29, 2017 | Oct 4, 2012 |
| Suse | — | Upgrade libwireshark8Upgrade libwiretap7Upgrade libwiretap6Upgrade libwsutil16Upgrade libwiretap16Upgrade libwsutil7Upgrade libwscodecs1Upgrade wiresharkUpgrade wireshark-gtkUpgrade wireshark-ui-qtUpgrade libwsutil8Upgrade libwsutil17Upgrade libwireshark19Upgrade libwiretap15Upgrade wireshark-develUpgrade libwireshark18Upgrade libwireshark9 | Aug 9, 2024 | Jul 9, 2013 |
| Wireshark | — | Upgrade to Wireshark version 1.8.3 | Oct 4, 2017 | Oct 4, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub