CVE-2018-19622
libwireshark11: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop
CVE-2018-19622 is fixed in 10 products on 1 platform, first by libwireshark-data 2.6.5-1~ubuntu18.04.0, released November 28, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0324
88th percentile
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libwireshark-data · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwireshark-data 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwireshark11 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwireshark11 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwiretap8 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwiretap8 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwscodecs2 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwscodecs2 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwsutil9 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwsutil9 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| tshark · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | tshark 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-common · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-common 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-gtk · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-gtk 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-qt · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-qt 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |