CVE-2018-19626
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was...
5.5 MediumFix available
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.44%Down 0.4 points since Apr 14, 2021
What each source reports
NVD Score used
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
CVE-2018-19626- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125, CWE-908
- Updated
- 2026-11-02
CVE List No score
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
CVE-2018-19626- Updated
- 2026-11-02
EUVDEUVD-2018-11311 No score
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
EUVD-2018-11311- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jq69-42qh-q6qj
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was...
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
GHSA-jq69-42qh-q6qj- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-19626
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
ALPINE-CVE-2018-19626- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
CVE-2018-19626- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2018-19626
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
DEBIAN-CVE-2018-19626- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-19626
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
- Record
UBUNTU-CVE-2018-19626- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0362-1 No score
Security update for wireshark
This update for wireshark and libmaxminddb fixes the following issues:
Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).
New features include:
- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0362-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:4295-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 2.4.11 (bsc#1117740).
Security issues fixed:
- CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
- CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
- CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
- CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
- CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
- CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
Further bug fixes and updated protocol support as listed in:
- Record
SUSE-SU-2018:4295-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:4298-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 2.4.11 (bsc#1117740).
Security issues fixed:
- CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
- CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
- CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
- CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
- CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
- CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
Further bug fixes and updated protocol support as listed in:
- Record
SUSE-SU-2018:4298-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0693-1 No score
Security update for wireshark
This update for wireshark and libmaxminddb fixes the following issues:
Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).
New features include:
- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
- Record
SUSE-SU-2020:0693-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.10 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.11 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.12 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.13 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.14 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.15 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.16 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.17 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.18 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.19 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
Show 47 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.20 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.21 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.22 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.23 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.24 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkAlpine:v3.7 |
2.4.0 up to 2.4.11-r0 | 2.4.11-r0 |
wiresharkAlpine:v3.8 |
2.4.0 up to 2.4.11-r0 | 2.4.11-r0 |
wiresharkAlpine:v3.9 |
2.4.0 up to 2.6.5-r0 | 2.6.5-r0 |
wiresharkDebian:12 |
before 2.6.5-1 | 2.6.5-1 |
wiresharkDebian:13 |
before 2.6.5-1 | 2.6.5-1 |
wiresharkDebian:14 |
before 2.6.5-1 | 2.6.5-1 |
wiresharkDebian:8 From an advisory covering 41 CVEs |
before 1.12.1+g01b65bf-4+deb8u16, plus listed versions 1.12.1+g01b65bf-41.12.1+g01b65bf-4+deb8u11.12.1+g01b65bf-4+deb8u101.12.1+g01b65bf-4+deb8u111.12.1+g01b65bf-4+deb8u12 Show 22 moreShow less1.12.1+g01b65bf-4+deb8u131.12.1+g01b65bf-4+deb8u141.12.1+g01b65bf-4+deb8u151.12.1+g01b65bf-4+deb8u21.12.1+g01b65bf-4+deb8u31.12.1+g01b65bf-4+deb8u41.12.1+g01b65bf-4+deb8u51.12.1+g01b65bf-4+deb8u61.12.1+g01b65bf-4+deb8u6~deb7u11.12.1+g01b65bf-4+deb8u6~deb7u101.12.1+g01b65bf-4+deb8u6~deb7u111.12.1+g01b65bf-4+deb8u6~deb7u21.12.1+g01b65bf-4+deb8u6~deb7u31.12.1+g01b65bf-4+deb8u6~deb7u41.12.1+g01b65bf-4+deb8u6~deb7u51.12.1+g01b65bf-4+deb8u6~deb7u61.12.1+g01b65bf-4+deb8u6~deb7u71.12.1+g01b65bf-4+deb8u6~deb7u81.12.1+g01b65bf-4+deb8u6~deb7u91.12.1+g01b65bf-4+deb8u71.12.1+g01b65bf-4+deb8u81.12.1+g01b65bf-4+deb8u9 |
1.12.1+g01b65bf-4+deb8u16 |
wiresharkDebian:9 From an advisory covering 11 CVEs |
before 2.6.5-1~deb9u1, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 14 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.2-12.6.2-22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-2 |
2.6.5-1~deb9u1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 6 CVEs |
before 2.4.11-3.15.1 | 2.4.11-3.15.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 6 CVEs |
before 2.4.11-3.15.1 | 2.4.11-3.15.1 |
wiresharkSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 6 CVEs |
before 2.4.11-48.35.1 | 2.4.11-48.35.1 |
libmaxminddbSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
spandspSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
wiresharkUbuntu:14.04:LTS |
before 2.6.5-1~ubuntu14.04.1, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-11.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.1 |
2.6.5-1~ubuntu14.04.1 |
wiresharkUbuntu:16.04:LTS |
before 2.6.5-1~ubuntu16.04.0, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.042.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.0 |
2.6.5-1~ubuntu16.04.0 |
wiresharkUbuntu:18.04:LTS |
before 2.6.5-1~ubuntu18.04.0, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.12.6.4-2~ubuntu18.04.0 |
2.6.5-1~ubuntu18.04.0 |
libmaxminddbopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 1.4.2-lp151.3.3.1 | 1.4.2-lp151.3.3.1 |
spandspopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 0.0.6-lp151.3.3.1 | 0.0.6-lp151.3.3.1 |
wiresharkopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 3.2.2-lp151.2.9.1 | 3.2.2-lp151.2.9.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-19626 is a medium vulnerability (CVSS 5.5) in Wireshark, published November 29, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. Fixed in wireshark 2.6.5-r0.
References
wireshark.org/security/wnpa-sec-2018-52.html
lists.debian.org/debian-lts-announce/2019/01/msg00010.html
bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130
securityfocus.com/bid/106051
debian.org/security/2018/dsa-4359
code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c5a65115ebab55cfd5ce0a855c2256e01cab6449
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
oracle.com/security-alerts/cpuapr2020.html
nvd.nist.gov/vuln/detail/CVE-2018-19626
github.com/advisories/GHSA-jq69-42qh-q6qj
security.alpinelinux.org/vuln/CVE-2018-19626
security-tracker.debian.org/tracker/CVE-2018-19626
suse.com/support/update/announcement/2018/suse-su-20184295-1
bugzilla.suse.com/1117740
ubuntu.com/security/CVE-2018-19626
cve.org/CVERecord?id=CVE-2018-19626
This page doesn't list everything
Left out here: 16 references. The JSON record has them.