CVE-2018-14370: High severity wireshark vulnerability
Published Jul 19, 2018
·Updated
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.
Affected Software
2 affected components
Wireshark Wireshark>=2.4.0<=2.4.7
Wireshark Wireshark>=2.6.0<=2.6.1
Remediation
Patch Available
Event History
Jul 19, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14370?
CVE-2018-14370 has a medium severity rating as it can cause a crash in the Wireshark application.
2
How do I fix CVE-2018-14370?
To fix CVE-2018-14370, update Wireshark to version 2.6.2 or later for the 2.6.x series, or to version 2.4.8 or later for the 2.4.x series.
3
Which versions of Wireshark are affected by CVE-2018-14370?
CVE-2018-14370 affects Wireshark versions 2.4.0 to 2.4.7 and 2.6.0 to 2.6.1.
4
What type of vulnerability is CVE-2018-14370?
CVE-2018-14370 is a buffer over-read vulnerability in the IEEE 802.11 protocol dissector.
5
Can CVE-2018-14370 be exploited remotely?
Yes, CVE-2018-14370 could potentially be exploited remotely if a user processes maliciously crafted packets.