In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Jun 13, 2018 | May 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade wireshark-develUpgrade wireshark-debuginfoUpgrade wiresharkUpgrade wireshark-gnome | Jun 18, 2020 | May 22, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 22, 2018 |
| Centos_linux | — | Upgrade wireshark-gnomeUpgrade wiresharkUpgrade wireshark-debuginfoUpgrade wireshark-devel | Apr 1, 2020 | May 22, 2018 |
| Debian | — | Upgrade wireshark | Jun 5, 2018 | May 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade wiresharkUpgrade wireshark-gnome | Apr 30, 2021 | May 22, 2018 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3Upgrade diagnostic/wireshark to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3 | Jun 18, 2018 | May 22, 2018 |
| Oracle_linux | — | Upgrade wiresharkUpgrade wireshark-gnomeUpgrade wireshark-devel | Oct 5, 2022 | Apr 24, 2018 |
| Redhat_linux | — | Upgrade wireshark-gnomeNo solution existsUpgrade wireshark-debuginfoUpgrade wireshark-develUpgrade wireshark | Apr 1, 2020 | May 22, 2018 |
| Suse | — | Upgrade libwsutil11Upgrade libwsutil8Upgrade wireshark-develUpgrade mmdblookupUpgrade libwscodecs1Upgrade libspandsp2Upgrade libmaxminddb-develUpgrade libwiretap10Upgrade libwiretap7Upgrade libwireshark9Upgrade libwireshark13Upgrade libwiretap6Upgrade spandsp-docUpgrade libwireshark8Upgrade spandsp-develUpgrade libmaxminddb0-32bitUpgrade wiresharkUpgrade libmaxminddb0Upgrade wireshark-gtkUpgrade wireshark-ui-qtUpgrade libwsutil7Upgrade libspandsp2-32bit | May 29, 2018 | May 22, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | May 22, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.2.15Upgrade to Wireshark version 2.4.7Upgrade to Wireshark version 2.6.1 | May 23, 2018 | May 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub