CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash

published November 29, 2018

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01408 · 72.4th percentile
Published
2018-11-29T04:00Z
EPSS history
Timeline
  • 29 NOV 04:00Z
    In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash
    cvelistv5