CVE-2018-7323: High severity Wireshark Wireshark vulnerability
Published Feb 23, 2018
·Updated
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.
Affected Software
4 affected components
Wireshark Wireshark>=2.2.0<=2.2.12
Wireshark Wireshark>=2.4.0<=2.4.4
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Remediation
Event History
Feb 23, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7323?
CVE-2018-7323 is classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2018-7323?
To fix CVE-2018-7323, upgrade Wireshark to the latest version, specifically version 2.4.5 or later.
3
What versions of Wireshark are affected by CVE-2018-7323?
CVE-2018-7323 affects Wireshark versions 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12.
4
Can CVE-2018-7323 be exploited remotely?
CVE-2018-7323 could potentially be exploited remotely if a malicious packet is sent to a vulnerable Wireshark version.
5
What is the nature of the vulnerability in CVE-2018-7323?
CVE-2018-7323 involves a large loop in the WCCP dissector that could lead to excessive resource consumption.