CVE-2018-16058: High severity wireshark vulnerability
Published Aug 30, 2018
·Updated
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure.
Affected Software
6 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1
Wireshark Wireshark>=2.2.0<=2.2.16
Wireshark Wireshark>=2.4.0<=2.4.8
Wireshark Wireshark>=2.6.0<=2.6.2
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Aug 30, 2018
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16058?
CVE-2018-16058 has a medium severity rating due to the potential for application crashes.
2
How do I fix CVE-2018-16058?
To fix CVE-2018-16058, upgrade to Wireshark versions 2.6.20-0+deb10u4, 2.6.20-0+deb10u7, 3.4.10-0+deb11u1, 4.0.6-1~deb12u1, or 4.0.10-1.
3
Which versions of Wireshark are affected by CVE-2018-16058?
Wireshark versions 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16 are affected by CVE-2018-16058.
4
Is CVE-2018-16058 a denial-of-service vulnerability?
Yes, CVE-2018-16058 is considered a denial-of-service vulnerability as it can cause the application to crash.
5
What component of Wireshark does CVE-2018-16058 affect?
CVE-2018-16058 affects the Bluetooth AVDTP dissector component of Wireshark.