CVE-2018-7420

Description

In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a block-size check for sysdig event blocks.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

2.017

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Wireshark (X64) 2.4.4	Windows
Multiple vulnerabilities affected in Wireshark 2.4.4	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-343288	Wireshark (X64) (4.4.2)
PATCH-338541	Wireshark (3.6.24)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234