CVE-2018-7421: High severity Wireshark Wireshark vulnerability
In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7421?
CVE-2018-7421 has been classified as a medium severity vulnerability due to the potential for an infinite loop in Wireshark.
How do I fix CVE-2018-7421?
To fix CVE-2018-7421, upgrade to Wireshark version 2.2.13 or 2.4.5 or later.
What components of Wireshark are affected by CVE-2018-7421?
CVE-2018-7421 affects the DMP dissector in Wireshark versions 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4.
Is CVE-2018-7421 a critical vulnerability in Wireshark?
CVE-2018-7421 is not classified as critical, but it poses a risk due to potential performance impacts.
What does the DMP dissector do in relation to CVE-2018-7421?
The DMP dissector in Wireshark is responsible for parsing DMP protocol data, and the vulnerability could lead to excessive resource consumption.