CVE-2018-19628
libwireshark11: In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash
CVE-2018-19628 is fixed in 10 products on 1 platform, first by libwireshark-data 2.6.5-1~ubuntu18.04.0, released November 28, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0314
87th percentile
In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libwireshark-data · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwireshark-data 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwireshark11 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwireshark11 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwiretap8 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwiretap8 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwscodecs2 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwscodecs2 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| libwsutil9 · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | libwsutil9 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| tshark · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | tshark 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-common · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-common 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-gtk · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-gtk 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |
| wireshark-qt · Ubuntu 18.04.6 LTS (bionic) | 2.6.5-1~ubuntu18.04.0 | wireshark-qt 2.6.5-1~ubuntu18.04.0 | Nov 28, 2018 |