CVE-2018-7320: High severity Wireshark Wireshark vulnerability
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/wiresharkto a version that resolves this vulnerability.Fixed in 2.6.20-0+deb10u4Fixed in 2.6.20-0+deb10u7Fixed in 3.4.10-0+deb11u1Fixed in 4.0.6-1~deb12u1Fixed in 4.0.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7320?
CVE-2018-7320 has a moderate severity as it can lead to crashes in Wireshark when processing certain SIGCOMP protocol packets.
How do I fix CVE-2018-7320?
To fix CVE-2018-7320, upgrade Wireshark to version 2.6.20-0+deb10u4 or later, or to version 3.4.10-0+deb11u1 or later.
What versions of Wireshark are affected by CVE-2018-7320?
CVE-2018-7320 affects Wireshark versions from 2.4.0 to 2.4.4 and from 2.2.0 to 2.2.12.
What protocol is exploited in CVE-2018-7320?
CVE-2018-7320 exploits the SIGCOMP protocol dissector in Wireshark.
Is CVE-2018-7320 specific to a certain operating system?
CVE-2018-7320 is observed in versions of Wireshark running on Debian GNU/Linux versions 8.0 and 9.0.