CVE-2018-9270: High severity Wireshark Wireshark vulnerability
Published Apr 4, 2018
·Updated
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak.
Affected Software
4 affected components
Wireshark Wireshark>=2.2.0<=2.2.13
Wireshark Wireshark>=2.4.0<=2.4.5
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Apr 4, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9270?
CVE-2018-9270 is classified as a moderate severity vulnerability due to the presence of a memory leak in Wireshark.
2
How do I fix CVE-2018-9270?
To fix CVE-2018-9270, upgrade Wireshark to versions later than 2.4.5 or 2.2.13.
3
What are the affected versions for CVE-2018-9270?
CVE-2018-9270 affects Wireshark versions from 2.4.0 to 2.4.5 and from 2.2.0 to 2.2.13.
4
What impact does CVE-2018-9270 have on systems?
CVE-2018-9270 can lead to resource exhaustion due to a memory leak, potentially affecting system stability.
5
Is CVE-2018-9270 exploitable remotely?
CVE-2018-9270 is not considered exploitable remotely, as it requires local execution of Wireshark.