A flaw was found in Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. This was addressed in epan/tvbuff.c by rejecting negative lengths. References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14678 https://www.wireshark.org/security/wnpa-sec-2018-28.html Upstream patch: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=ab8a33ef083b9732c89117747a83a905a676faf6
Created wireshark tracking bugs for this issue: Affects: fedora-all [bug 1581754]
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2018-11357