Vulnerability CVE-2018-14367: Information

Description

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

Severity: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2018-14367
Published: July 19, 2018
Modified: Nov. 7, 2023
Error type identifier: CWE-252

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
wiresharksisyphus2.5.1-alt1.S14.2.5-alt2ALT-PU-2018-1549-1203426Fixed
wiresharkp102.5.1-alt1.S14.0.11-alt1ALT-PU-2018-1549-1203426Fixed
wiresharkp92.5.1-alt1.S14.0.8-alt1ALT-PU-2018-1549-1203426Fixed
wiresharkp82.6.2-alt1.M80P.13.0.6-alt1ALT-PU-2018-2060-1210600Fixed
wiresharkc10f12.5.1-alt1.S14.0.11-alt1ALT-PU-2018-1549-1203426Fixed
wiresharkc9f22.5.1-alt1.S14.0.11-alt1ALT-PU-2018-1549-1203426Fixed
wiresharkp112.5.1-alt1.S14.2.5-alt2ALT-PU-2018-1549-1203426Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.wireshark.org/security/wnpa-sec-2018-42.html
  • Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966
  • Issue Tracking
  • Vendor Advisory
104847
  • Third Party Advisory
  • VDB Entry
1041608
  • Third Party Advisory
  • VDB Entry
openSUSE-SU-2020:0362
    https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310

        1. Configuration 1

          cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
          Start including
          2.4.0
          End including
          2.4.7
          cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
          Start including
          2.6.0
          End including
          2.6.1
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.5.3
      Back to top