Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2018-19624

Published: 29/11/2018 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Wireshark

Vulnerability Summary

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark

debian debian linux 8.0

debian debian linux 9.0

Vendor Advisories

Debian Security Advisories: DSA-4359-1 wireshark -- security update
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code For the stable distribution (stretch), these problems have been fixed in version 265-1~deb9u1 We recommend that you upgrade your wireshark packages For the detailed security status ...
Red Hat: CVE-2018-19624
A NULL pointer dereference vulnerability in the PVFS dissector allows Wireshark to crash when parsing a specially crafted pcap file A remote attacker could cause a denial of service to Wireshark by injecting malicious packets into the network that are automatically processed ...
Arch Linux Issues:
A NULL-pointer dereference has been found in the PVFS dissector of Wireshark versions prior to 265, which could be triggered by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file ...

References

CWE-476https://www.wireshark.org/security/wnpa-sec-2018-56.htmlhttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15280http://www.securityfocus.com/bid/106051https://www.debian.org/security/2018/dsa-4359https://lists.debian.org/debian-lts-announce/2019/01/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3e319db1107b08fc3be804b6d449143ec9aa0dechttps://nvd.nist.govhttps://www.debian.org/security/./dsa-4359https://access.redhat.com/security/cve/cve-2018-19624
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook