CVE-2018-9271: High severity Wireshark Wireshark vulnerability
Published Apr 4, 2018
·Updated
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak.
Affected Software
2 affected components
Wireshark Wireshark>=2.2.0<=2.2.13
Wireshark Wireshark>=2.4.0<=2.4.5
Remediation
Event History
Apr 4, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9271?
CVE-2018-9271 is classified as a medium severity vulnerability due to its memory leak issue.
2
How do I fix CVE-2018-9271?
To fix CVE-2018-9271, update Wireshark to version 2.4.6 or later, or 2.2.14 or later.
3
Which versions of Wireshark are affected by CVE-2018-9271?
CVE-2018-9271 affects Wireshark versions 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13.
4
What is the nature of the vulnerability in CVE-2018-9271?
CVE-2018-9271 is a memory leak vulnerability in the epan/dissectors/packet-multipart.c file.
5
Is there a workaround for CVE-2018-9271?
There is no official workaround for CVE-2018-9271; updating to a fixed version is recommended.