PT-2018-12457 · Wireshark+4 · Wireshark+4

Buildbot Builder · Published 2018-04-03 · Updated 2024-06-15 · CVE-2018-14341

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.15 Wireshark versions 2.4.0 through 2.4.7 Wireshark versions 2.6.0 through 2.6.1

Description The issue is related to the DICOM dissector, which could enter a large or infinite loop due to an offset overflow. This was fixed by modifying the packet-dcm.c file in the epan/dissectors directory to prevent the overflow.

Recommendations For Wireshark versions 2.2.0 through 2.2.15, update to a version that includes the fix for the DICOM dissector issue. For Wireshark versions 2.4.0 through 2.4.7, update to a version that includes the fix for the DICOM dissector issue. For Wireshark versions 2.6.0 through 2.6.1, update to a version that includes the fix for the DICOM dissector issue.

Fix

Integer Overflow

Infinite Loop

Weakness Enumeration

CWE-190

CWE-835

Related Identifiers

ALT-PU-2018-1549

ALT-PU-2018-2048

ALT-PU-2018-2487

CESA-2020_1047

CVE-2018-14341

DLA-1451-1

MGASA-2018-0320

OPENSUSE-SU-2018_2184-1

OPENSUSE-SU-2018_2188-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

RHSA-2020:1047

RHSA-2020_1047

SUSE-SU-2018:2301-1

SUSE-SU-2018:2412-1

SUSE-SU-2018:2891-1

SUSE-SU-2018:2891-2

SUSE-SU-2020:0693-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Wireshark

References · 541

• https://wireshark.org/security/wnpa-sec-2018-39.html · Vendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7323 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9258 · Security Note
• https://bdu.fstec.ru/vul/2022-00269 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:0693-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02571 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7325 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9345 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14370 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:2891-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02570 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17083 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14369 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13764 · Security Note