CVE-2018-18226

Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code For the stable distribution (stretch), these problems have been fixed in version 265-1~deb9u1 We recommend that you upgrade your wireshark packages For the detailed security status ...

In Wireshark 260 to 263, the Steam IHS Discovery dissector could consume system memory This was addressed in epan/dissectors/packet-steam-ihs-discoveryc by changing the memory-management approach ...

A flaw has been discovered in wireshark >= 260 and < 264 in the Steam IHS Discovery dissector where dynamically allocated memory was not properly freed on exception This could be used by an attacker to crash wireshark by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file ...