Name: CVE-2018-19622: Loop with Unreachable Exit Condition
Creator: Rapid7
Published: 2018-11-29T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-19622, CWE-835, CVSS 7.5, EPSS 0.03241

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade wireshark	Jan 2, 2019	Nov 29, 2018
Amazon Linux Ami 2	—	Upgrade wiresharkUpgrade wireshark-develUpgrade wireshark-debuginfoUpgrade wireshark-gnome	Jun 18, 2020	Nov 29, 2018
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Nov 29, 2018
Centos_linux	—	Upgrade wireshark-gnomeUpgrade wireshark-develUpgrade wiresharkUpgrade wireshark-debuginfo	Apr 1, 2020	Nov 29, 2018
Debian	—	Upgrade wireshark	Dec 28, 2018	Nov 28, 2018
Huawei Euleros 2_0_sp2	—	Upgrade wireshark-gnomeUpgrade wireshark	Dec 4, 2019	Nov 29, 2018
Huawei Euleros 2_0_sp3	—	Upgrade wireshark-gnomeUpgrade wireshark	Apr 30, 2021	Nov 29, 2018
Oracle Solaris	—	Upgrade diagnostic/wireshark/wireshark-common to version 2.6.5-11.4.5.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 2.6.5-11.4.5.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark/tshark to version 2.6.5-11.4.5.0.1.1.0 on Solaris 11.4	Feb 20, 2019	Nov 28, 2018
Oracle_linux	—	Upgrade wiresharkUpgrade wireshark-gnomeUpgrade wireshark-devel	Oct 5, 2022	Nov 27, 2018
Redhat_linux	—	Upgrade wireshark-debuginfoNo solution existsUpgrade wireshark-develUpgrade wireshark-gnomeUpgrade wireshark	Apr 1, 2020	Nov 29, 2018
Suse	—	Upgrade wireshark-gtkUpgrade libspandsp2-32bitUpgrade libwiretap7Upgrade libwsutil8Upgrade spandsp-docUpgrade wireshark-ui-qtUpgrade libwiretap10Upgrade libwsutil11Upgrade libmaxminddb0Upgrade libmaxminddb-develUpgrade libwscodecs1Upgrade libwireshark9Upgrade libspandsp2Upgrade mmdblookupUpgrade libmaxminddb0-32bitUpgrade wireshark-develUpgrade wiresharkUpgrade libwireshark13Upgrade spandsp-devel	Dec 29, 2018	Nov 28, 2018
Ubuntu	—	Upgrade wireshark	Nov 19, 2024	Nov 29, 2018
Wireshark	—	Upgrade to Wireshark version 2.4.11Upgrade to Wireshark version 2.6.5	Nov 30, 2018	Nov 28, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence