PT-2018-13394 · Wireshark+2 · Wireshark+2

Published 2018-04-03 · Updated 2024-06-15 · CVE-2018-16058

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.16 Wireshark versions 2.4.0 through 2.4.8 Wireshark versions 2.6.0 through 2.6.2

Description The Bluetooth AVDTP dissector could crash due to improper initialization of a data structure. This issue was addressed by properly initializing the data structure in epan/dissectors/packet-btavdtp.c.

Recommendations For Wireshark versions 2.2.0 through 2.2.16, update to a version where the Bluetooth AVDTP dissector is properly initialized. For Wireshark versions 2.4.0 through 2.4.8, update to a version where the Bluetooth AVDTP dissector is properly initialized. For Wireshark versions 2.6.0 through 2.6.2, update to a version where the Bluetooth AVDTP dissector is properly initialized.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

ALT-PU-2018-1549

ALT-PU-2018-2268

ALT-PU-2018-2487

CVE-2018-16058

DLA-1634-1

DSA-4315-1

MGASA-2018-0370

OPENSUSE-SU-2018_2587-1

OPENSUSE-SU-2018_2628-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2018:2872-1

SUSE-SU-2018:2889-1

SUSE-SU-2018:2891-1

SUSE-SU-2018:2891-2

SUSE-SU-2020:0693-1

Affected Products

Alt Linux

Suse

Wireshark

References · 529

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7747 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:2872-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01559 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7321 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0370 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10903 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7746 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7323 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-16058 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-16058 · Security Note
• https://bdu.fstec.ru/vul/2022-00215 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9272 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9347 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9258 · Security Note
• https://advisories.mageia.org/MGASA-2018-0370.html · Security Note