CVE-2018-19623: High severity wireshark vulnerability

Q: What is the severity of CVE-2018-19623?

CVE-2018-19623 has been classified as a high-severity vulnerability due to the potential for remote code execution and application crashes.

Q: How do I fix CVE-2018-19623?

To mitigate CVE-2018-19623, update Wireshark to a version higher than 2.6.4 or 2.4.10.

Q: What versions of Wireshark are affected by CVE-2018-19623?

CVE-2018-19623 affects Wireshark versions from 2.6.0 to 2.6.4 and from 2.4.0 to 2.4.10.

Q: Can CVE-2018-19623 allow an attacker to execute code?

Yes, CVE-2018-19623 could allow a remote attacker to write arbitrary data to memory, which may lead to code execution.

Q: What specific component in Wireshark does CVE-2018-19623 affect?

CVE-2018-19623 affects the LBMPDM dissector component of Wireshark.

Published Nov 29, 2018

Updated

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.

Affected Software

5 affected componentsFixes available

debian/wireshark

2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1

Wireshark Wireshark>=2.4.0<=2.4.10

Wireshark Wireshark>=2.6.0<=2.6.4

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Remediation

Patch Available

https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9c8645ec7b28e4d7193962ecd2a418613bf6a84f

Event History

Nov 29, 2018

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-19623?

CVE-2018-19623 has been classified as a high-severity vulnerability due to the potential for remote code execution and application crashes.

How do I fix CVE-2018-19623?