In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Jun 13, 2018 | May 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade wireshark-develUpgrade wireshark-debuginfoUpgrade wireshark-gnomeUpgrade wireshark | Jun 18, 2020 | May 22, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 22, 2018 |
| Centos_linux | — | Upgrade wireshark-develUpgrade wireshark-debuginfoUpgrade wiresharkUpgrade wireshark-gnome | Apr 1, 2020 | May 22, 2018 |
| Debian | — | Upgrade wireshark | Jun 5, 2018 | May 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade wireshark-gnomeUpgrade wireshark | Apr 30, 2021 | May 22, 2018 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3Upgrade diagnostic/wireshark/wireshark-common to version 2.6.1-0.175.3.33.0.5.0 on Solaris 11.3 | Jun 18, 2018 | May 22, 2018 |
| Oracle_linux | — | Upgrade wireshark-gnomeUpgrade wireshark-develUpgrade wireshark | Oct 5, 2022 | Apr 24, 2018 |
| Redhat_linux | — | Upgrade wireshark-gnomeNo solution existsUpgrade wireshark-debuginfoUpgrade wiresharkUpgrade wireshark-devel | Apr 1, 2020 | May 22, 2018 |
| Suse | — | Upgrade libwiretap6Upgrade libwiretap10Upgrade libmaxminddb-develUpgrade libwireshark8Upgrade spandsp-docUpgrade libwsutil8Upgrade libwireshark13Upgrade mmdblookupUpgrade libwsutil11Upgrade libwiretap7Upgrade spandsp-develUpgrade libwscodecs1Upgrade libspandsp2Upgrade wireshark-develUpgrade libwireshark9Upgrade libmaxminddb0-32bitUpgrade wiresharkUpgrade libmaxminddb0Upgrade wireshark-gtkUpgrade wireshark-ui-qtUpgrade libwsutil7Upgrade libspandsp2-32bit | May 29, 2018 | May 22, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | May 22, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.4.7Upgrade to Wireshark version 2.2.15Upgrade to Wireshark version 2.6.1 | May 23, 2018 | May 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub