CVE-2018-6836: Critical severity Wireshark Wireshark vulnerability
The netmonreccommentdestroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6836?
CVE-2018-6836 has a severity level that indicates it can lead to denial of service due to application crashes.
How do I fix CVE-2018-6836?
To fix CVE-2018-6836, upgrade Wireshark to version 2.4.5 or later, which addresses this vulnerability.
What types of attacks can exploit CVE-2018-6836?
CVE-2018-6836 can be exploited by remote attackers to cause denial of service through application crashes.
Which versions of Wireshark are affected by CVE-2018-6836?
CVE-2018-6836 affects all versions of Wireshark up to and including 2.4.4.
Is CVE-2018-6836 related to memory management issues?
Yes, CVE-2018-6836 involves a free operation on an uninitialized memory address, indicating a memory management issue.