CVE-2018-9257: High severity Wireshark Wireshark vulnerability
Published Apr 4, 2018
·Updated
In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns.
Affected Software
1 affected component
Wireshark Wireshark>=2.4.0<=2.4.5
Remediation
Event History
Apr 4, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9257?
CVE-2018-9257 has been classified as a high severity vulnerability.
2
How do I fix CVE-2018-9257?
To fix CVE-2018-9257, upgrade Wireshark to version 2.4.6 or later.
3
What impact does CVE-2018-9257 have on Wireshark users?
CVE-2018-9257 can cause Wireshark to enter an infinite loop when dissecting certain CQL packets.
4
Which versions of Wireshark are affected by CVE-2018-9257?
Wireshark versions 2.4.0 to 2.4.5 are affected by CVE-2018-9257.
5
What component of Wireshark is vulnerable in CVE-2018-9257?
The CQL dissector is the component vulnerable in CVE-2018-9257.