CVE-2018-9267: High severity Wireshark Wireshark vulnerability
Published Apr 4, 2018
·Updated
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak.
Affected Software
3 affected components
Wireshark Wireshark>=2.2.0<=2.2.13
Wireshark Wireshark>=2.4.0<=2.4.5
Debian Debian Linux=8.0
Remediation
Event History
Apr 4, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9267?
CVE-2018-9267 has been classified with medium severity due to its potential impact on memory management.
2
How do I fix CVE-2018-9267?
To fix CVE-2018-9267, you should upgrade Wireshark to version 2.4.6 or later.
3
What software versions are affected by CVE-2018-9267?
CVE-2018-9267 affects Wireshark versions between 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13.
4
Is CVE-2018-9267 specific to any operating system?
CVE-2018-9267 is specifically noted in the context of Debian GNU/Linux version 8.0 with Wireshark installed.
5
What type of vulnerability is CVE-2018-9267?
CVE-2018-9267 is identified as a memory leak vulnerability in Wireshark's packet parsing code.