DEBIAN-CVE-2018-14368

DEBIAN-CVE-2018-14368 PUBLISHED CVSS 7.5 HIGH

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

Risk Scores

CVSS 3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	wireshark	0, 0, 0
Debian:13	wireshark	0, 0, 0
Debian:14	wireshark	0, 0, 0
Debian:12	wireshark	0, 0, 0

Timeline

Jul 19, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-14368 advisory

Open in Interactive Console →