DEBIAN-CVE-2018-14339

DEBIAN-CVE-2018-14339 PUBLISHED CVSS 7.5 HIGH

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.

Risk Scores

CVSS 3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	wireshark	0, 0, 0
Debian:13	wireshark	0, 0, 0
Debian:12	wireshark	0, 0, 0
Debian:14	wireshark	0, 0, 0

Timeline

Jul 19, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-14339 advisory

Open in Interactive Console →