CVE-2018-7320

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash

published February 23, 2018

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02617 · 85.2th percentile
Published
2018-02-23T22:00Z
EPSS history
Timeline
  • 23 FEB 22:00Z
    In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash
    cvelistv5