In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Mar 20, 2019 | Feb 28, 2019 |
| Debian | — | Upgrade wireshark | Mar 25, 2019 | Feb 27, 2019 |
| Suse | — | Upgrade libspandsp2-32bitUpgrade libwscodecs1Upgrade wireshark-develUpgrade libwireshark13Upgrade wireshark-ui-qtUpgrade libmaxminddb0Upgrade libmaxminddb0-32bitUpgrade libmaxminddb-develUpgrade wiresharkUpgrade libwsutil8Upgrade mmdblookupUpgrade libwiretap10Upgrade spandsp-docUpgrade libwsutil11Upgrade wireshark-gtkUpgrade libwiretap7Upgrade libspandsp2Upgrade libwireshark9Upgrade spandsp-devel | Apr 1, 2019 | Feb 27, 2019 |
| Ubuntu | — | Upgrade libwscodecs2Upgrade libwiretap8Upgrade wireshark-commonUpgrade libwireshark-dataUpgrade wiresharkUpgrade tsharkUpgrade libwireshark11Upgrade wireshark-gtkUpgrade libwsutil9Upgrade wireshark-qt | May 17, 2019 | Feb 27, 2019 |
| Wireshark | — | Upgrade to Wireshark version 2.4.13Upgrade to Wireshark version 2.6.7 | Mar 4, 2019 | Feb 27, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub