Test ID:	1.3.6.1.4.1.25623.1.0.813374
Category:	General
Title:	Wireshark Security Updates (May 2018) - Windows
Summary:	Wireshark is prone to multiple vulnerabilities.
Description:	Summary: Wireshark is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A buffer over-read error in 'epan/dissectors/packet-ldss.c' script. - Excessive memory consumption in LTP dissector and other dissectors. - A NULL pointer dereference error in 'epan/dissectors/packet-dns.c' script. - An off-by-one error in 'epan/dissectors/packet-gsm_a_dtap.c' script. - A use-after-free error in 'epan/dissectors/packet-q931.c' script. - A NULL pointer dereference error in 'epan/proto.c' script. Vulnerability Impact: Successful exploitation will allow attackers to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. Affected Software/OS: Wireshark version 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14 on Windows. Solution: Upgrade to Wireshark version 2.6.1 or 2.4.7, or 2.2.15 or later. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11362 BugTraq ID: 104308 http://www.securityfocus.com/bid/104308 Debian Security Information: DSA-4217 (Google Search) https://www.debian.org/security/2018/dsa-4217 https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html http://www.securitytracker.com/id/1041036 SuSE Security Announcement: openSUSE-SU-2020:0362 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2018-11360 Common Vulnerability Exposure (CVE) ID: CVE-2018-11359 https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2018-11358 Common Vulnerability Exposure (CVE) ID: CVE-2018-11357 Common Vulnerability Exposure (CVE) ID: CVE-2018-11356
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.