Skip to content
OpenAdvisories
Unscored CVE-2018-7421 EUVD-2018-19152GHSA-7mvc-3rvp-5f4m

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/pa…

Published Feb 23, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Package: wireshark Package: wireshark Ecosystem: Debian Ecosystem: Ubuntu

Description

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 wireshark 2.4.5-1 —
Debian 13 wireshark 2.4.5-1 —
Debian 12 wireshark 2.4.5-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS wireshark 2.6.3-1~ubuntu18.04.1 —
Ubuntu 16.04 LTS wireshark 2.6.3-1~ubuntu16.04.1 —
Ubuntu 14.04 LTS wireshark 2.6.3-1~ubuntu14.04.1 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP3 wireshark 2.2.13-48.21.1 SUSE-SU-2018:0811-1
SLES 12 SP2 wireshark 2.2.13-48.21.1 SUSE-SU-2018:0811-1
SLES 11 SP4 wireshark 2.2.13-40.22.1 SUSE-SU-2018:0867-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP3 wireshark 2.2.13-48.21.1 SUSE-SU-2018:0811-1
SLES for SAP 12 SP2 wireshark 2.2.13-48.21.1 SUSE-SU-2018:0811-1
SLES for SAP 11 SP4 wireshark 2.2.13-40.22.1 SUSE-SU-2018:0867-1

Advisories 2

References