CVE-2018-9263: High severity Wireshark Wireshark vulnerability
Published Apr 4, 2018
·Updated
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length.
Affected Software
4 affected components
Wireshark Wireshark>=2.2.0<=2.2.13
Wireshark Wireshark>=2.4.0<=2.4.5
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Remediation
Event History
Apr 4, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9263?
CVE-2018-9263 has a medium severity rating due to the potential for denial of service via a crash in the Kerberos dissector.
2
How do I fix CVE-2018-9263?
To fix CVE-2018-9263, upgrade Wireshark to version 2.4.6 or later, or 2.2.14 or later.
3
What impact does CVE-2018-9263 have on affected software?
CVE-2018-9263 may lead to crashes in the Wireshark application when processing specially crafted Kerberos packets.
4
Which versions of Wireshark are affected by CVE-2018-9263?
Wireshark versions 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13 are affected by CVE-2018-9263.
5
Is CVE-2018-9263 related to any specific operating systems?
Yes, CVE-2018-9263 affects Wireshark installations on Debian 7.0 and 8.0 systems.