CVE-2018-19626

Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code For the stable distribution (stretch), these problems have been fixed in version 265-1~deb9u1 We recommend that you upgrade your wireshark packages For the detailed security status ...

Missing initialization of buffer in DCOM dissector could allow Wireshark to crash when parsing a specially crafted pcap file A remote attacker could cause a denial of service to Wireshark by injecting malicious packets into the network that are automatically processed Moreover, the content of uninitialized stack memory is leaked to the local user ...

An out-of-bounds read has been found in the DCOM dissector of Wireshark versions prior to 265, which could be triggered by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file ...