In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Oct 31, 2018 | Oct 12, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 12, 2018 |
| Debian | — | Upgrade wireshark | Dec 28, 2018 | Oct 12, 2018 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 2.6.4-11.4.3.0.1.4.0 on Solaris 11.4 | Nov 19, 2018 | Oct 12, 2018 |
| Suse | — | Upgrade libwireshark13Upgrade libmaxminddb-develUpgrade libwscodecs1Upgrade spandsp-docUpgrade libspandsp2Upgrade wireshark-gtkUpgrade mmdblookupUpgrade spandsp-develUpgrade libmaxminddb0Upgrade wiresharkUpgrade wireshark-ui-qtUpgrade libspandsp2-32bitUpgrade libwsutil8Upgrade wireshark-develUpgrade libwiretap7Upgrade libmaxminddb0-32bitUpgrade libwsutil11Upgrade libwireshark9Upgrade libwiretap10 | Oct 24, 2018 | Oct 12, 2018 |
| Ubuntu | — | Upgrade wireshark | Nov 19, 2024 | Oct 12, 2018 |
| Wireshark | — | Upgrade to Wireshark version 2.6.4Upgrade to Wireshark version 2.4.10 | Oct 15, 2018 | Oct 12, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub