{"id":"CVE-2018-11356","aliases":["ALPINE-CVE-2018-11356","DEBIAN-CVE-2018-11356","DLA-1634-1","EUVD-2018-3392","GHSA-cj9g-wwhq-mmwp","MGASA-2018-0266","SUSE-SU-2018:1988-1","SUSE-SU-2018:2412-1","SUSE-SU-2018:2891-1","SUSE-SU-2018:2891-2","SUSE-SU-2020:0693-1","UBUNTU-CVE-2018-11356","openSUSE-SU-2020:0362-1","openSUSE-SU-2024:11513-1"],"status":"published","title":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was...","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02788,"percentile":0.86503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-05-22T21:00:00Z","modified":"2026-10-24T10:30:29Z","fixes":[{"ecosystem":"Alpine:v3.5","package":"wireshark","fixed_in":["2.2.15-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["2.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["2.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["2.6.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","fixed_in":["2.6.3-1~ubuntu18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.5","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.15-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.1+g01b65bf-4+deb8u16"}]}],"versions":["1.12.1+g01b65bf-4","1.12.1+g01b65bf-4+deb8u1","1.12.1+g01b65bf-4+deb8u10","1.12.1+g01b65bf-4+deb8u11","1.12.1+g01b65bf-4+deb8u12","1.12.1+g01b65bf-4+deb8u13","1.12.1+g01b65bf-4+deb8u14","1.12.1+g01b65bf-4+deb8u15","1.12.1+g01b65bf-4+deb8u2","1.12.1+g01b65bf-4+deb8u3","1.12.1+g01b65bf-4+deb8u4","1.12.1+g01b65bf-4+deb8u5","1.12.1+g01b65bf-4+deb8u6","1.12.1+g01b65bf-4+deb8u6~deb7u1","1.12.1+g01b65bf-4+deb8u6~deb7u10","1.12.1+g01b65bf-4+deb8u6~deb7u11","1.12.1+g01b65bf-4+deb8u6~deb7u2","1.12.1+g01b65bf-4+deb8u6~deb7u3","1.12.1+g01b65bf-4+deb8u6~deb7u4","1.12.1+g01b65bf-4+deb8u6~deb7u5","1.12.1+g01b65bf-4+deb8u6~deb7u6","1.12.1+g01b65bf-4+deb8u6~deb7u7","1.12.1+g01b65bf-4+deb8u6~deb7u8","1.12.1+g01b65bf-4+deb8u6~deb7u9","1.12.1+g01b65bf-4+deb8u7","1.12.1+g01b65bf-4+deb8u8","1.12.1+g01b65bf-4+deb8u9"],"bundled":41},{"source":"osv","ecosystem":"Mageia:6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.15-1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-3.3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-3.3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.16-40.28.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.16-40.28.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.16-40.28.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-48.29.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu14.04.1"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu16.04.1"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-1~ubuntu18.04.1"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-lp151.3.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-lp151.3.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-lp151.2.9.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-1.2"}]}],"bundled":163}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2018-29.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://www.securityfocus.com/bid/104308","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4425716ddba99374749bd033d9bc0f4add2fb973","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14681","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1041036","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11356"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4425716ddba99374749bd033d9bc0f4add2fb973","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cj9g-wwhq-mmwp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-11356","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11356","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0266.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23080","tags":["report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2018-25.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2018-28.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2018-30.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2018-31.html","tags":["web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2018-33.html","tags":["web"]},{"url":"https://www.wireshark.org/docs/relnotes/wireshark-2.2.15.html","tags":["web"]},{"url":"https://www.wireshark.org/news/20180522.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181988-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1094301","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11362","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182412-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1101776","tags":["report"]},{"url":"https://bugzilla.suse.com/1101777","tags":["report"]},{"url":"https://bugzilla.suse.com/1101786","tags":["report"]},{"url":"https://bugzilla.suse.com/1101788","tags":["report"]},{"url":"https://bugzilla.suse.com/1101791","tags":["report"]},{"url":"https://bugzilla.suse.com/1101794","tags":["report"]},{"url":"https://bugzilla.suse.com/1101800","tags":["report"]},{"url":"https://bugzilla.suse.com/1101802","tags":["report"]},{"url":"https://bugzilla.suse.com/1101804","tags":["report"]},{"url":"https://bugzilla.suse.com/1101810","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14370","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182891-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106514","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16058","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182891-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200693-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1093733","tags":["report"]},{"url":"https://bugzilla.suse.com/1111647","tags":["report"]},{"url":"https://bugzilla.suse.com/1117740","tags":["report"]},{"url":"https://bugzilla.suse.com/1121231","tags":["report"]},{"url":"https://bugzilla.suse.com/1121232","tags":["report"]},{"url":"https://bugzilla.suse.com/1121233","tags":["report"]},{"url":"https://bugzilla.suse.com/1121234","tags":["report"]},{"url":"https://bugzilla.suse.com/1121235","tags":["report"]},{"url":"https://bugzilla.suse.com/1127367","tags":["report"]},{"url":"https://bugzilla.suse.com/1127369","tags":["report"]},{"url":"https://bugzilla.suse.com/1127370","tags":["report"]},{"url":"https://bugzilla.suse.com/1131941","tags":["report"]},{"url":"https://bugzilla.suse.com/1131945","tags":["report"]},{"url":"https://bugzilla.suse.com/1136021","tags":["report"]},{"url":"https://bugzilla.suse.com/1141980","tags":["report"]},{"url":"https://bugzilla.suse.com/1150690","tags":["report"]},{"url":"https://bugzilla.suse.com/1156288","tags":["report"]},{"url":"https://bugzilla.suse.com/1158505","tags":["report"]},{"url":"https://bugzilla.suse.com/1161052","tags":["report"]},{"url":"https://bugzilla.suse.com/1165241","tags":["report"]},{"url":"https://bugzilla.suse.com/1165710","tags":["report"]},{"url":"https://bugzilla.suse.com/957624","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9431","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-11356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11356","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22235","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:00:00Z","modified":"2024-08-05T08:10:13.316Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3392","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:00:00Z","modified":"2024-08-05T08:10:13Z","updated_at":"2026-11-03T02:39:55.512487Z"}],"ghsa":[{"id":"GHSA-cj9g-wwhq-mmwp","title":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was...","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2022-05-13T01:27:52Z","modified":"2023-02-01T05:07:56Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:50:38.356016Z"}],"nvd":[{"id":"CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:29:00.3Z","modified":"2026-06-17T01:35:47.133Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:27.507872Z"}],"osv":[{"id":"ALPINE-CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:29:00.3Z","modified":"2026-10-23T17:17:55.20371195Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:29:00.3Z","modified":"2026-10-24T10:30:29.484807628Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:29:00.3Z","modified":"2026-10-23T18:03:53.590742194Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-11356","description":"In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in an SRV record.","status":"published","published":"2018-05-22T21:29:00Z","modified":"2026-04-22T11:41:31.021728Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1634-1","title":"wireshark - security update","status":"published","published":"2019-01-15T00:00:00Z","modified":"2026-03-09T01:21:39.898821Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2018-0266","title":"Updated wireshark packages fix security vulnerabilities","description":"Updated wireshark packages fix security vulnerabilities:\n\nThe DNS dissector could crash (CVE-2018-11356).\n\nMultiple dissectors could consume excessive memory (CVE-2018-11357).\n\nThe Q.931 dissector could crash (CVE-2018-11358).\n\nMultiple dissectors could crash (CVE-2018-11359).\n\nThe GSM A DTAP dissector could crash (CVE-2018-11360).\n\nThe LDSS dissector could crash (CVE-2018-11362).  \n","status":"published","published":"2018-06-03T11:02:21Z","modified":"2026-04-16T06:22:36.065353329Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2020:0362-1","title":"Security update for wireshark","description":"This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-19T19:19:35Z","modified":"2026-02-04T04:38:44.359525Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11513-1","title":"libwireshark14-3.4.8-1.2 on GA media","description":"These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:40.825311Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:1988-1","title":"Security update for wireshark","description":"This update for wireshark fixes vulnerabilities that could be\nused to trigger dissector crashes or cause dissectors to go into large infinite\nloops by making Wireshark read specially crafted packages from the network or\ncapture files (bsc#1094301).\n\nThis includes:\n\n- CVE-2018-11356: DNS dissector crash \n- CVE-2018-11357: Multiple dissectors could consume excessive memory \n- CVE-2018-11358: Q.931 dissector crash\n- CVE-2018-11359: The RRC dissector and other dissectors could crash\n- CVE-2018-11360: GSM A DTAP dissector crash \n- CVE-2018-11362: LDSS dissector crash \n","status":"published","published":"2018-07-19T07:32:17Z","modified":"2026-02-04T02:23:02.854608Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2412-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nSecurity issues fixed:\n\n- bsc#1094301: Wireshark security update to 2.6.1, 2.4.7, 2.2.15\n- CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, bsc#1101810)\n- CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, bsc#1101776)\n- CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, bsc#1101786)\n- CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, bsc#1101788)\n- CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, bsc#1101804)\n- CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, bsc#1101777)\n- CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, bsc#1101802)\n- CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, bsc#1101800)\n- CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, bsc#1101791)\n- CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, bsc#1101794)\n- CVE-2018-11355: Fix RTCP dissector crash (bsc#1094301).\n- CVE-2018-11362: Fix LDSS dissector crash (bsc#1094301).\n- CVE-2018-11361: Fix IEEE 802.11 dissector crash (bsc#1094301).\n- CVE-2018-11360: Fix GSM A DTAP dissector crash (bsc#1094301).\n- CVE-2018-11358: Fix Q.931 dissector crash (bsc#1094301).\n- CVE-2018-11359: Fix multiple dissectors crashs (bsc#1094301).\n- CVE-2018-11356: Fix DNS dissector crash (bsc#1094301).\n- CVE-2018-11357: Fix multiple dissectors that could consume excessive memory (bsc#1094301).\n- CVE-2018-11354: Fix IEEE 1905.1a dissector crash (bsc#1094301).\n","status":"published","published":"2018-08-17T14:59:56Z","modified":"2025-05-02T04:07:32.393048Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2891-1","title":"Security update for wireshark","description":"This update for wireshark to version 2.4.9 fixes the following issues:\n\nWireshark was updated to 2.4.9 (bsc#1094301, bsc#1106514).\n\nSecurity issues fixed:\n\n- CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)\n- CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)\n- CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)\n- CVE-2018-11355: Fix RTCP dissector crash (bsc#1094301).\n- CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, bsc#1101802)\n- CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, bsc#1101794)\n- CVE-2018-11362: Fix LDSS dissector crash (bsc#1094301).\n- CVE-2018-11361: Fix IEEE 802.11 dissector crash (bsc#1094301).\n- CVE-2018-11360: Fix GSM A DTAP dissector crash (bsc#1094301).\n- CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, bsc#1101777)\n- CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, bsc#1101786)\n- CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, bsc#1101804)\n- CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, bsc#1101776)\n- CVE-2018-11358: Fix Q.931 dissector crash (bsc#1094301).\n- CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, bsc#1101788)\n- CVE-2018-11359: Fix multiple dissectors crashs (bsc#1094301).\n- CVE-2018-11356: Fix DNS dissector crash (bsc#1094301).\n- CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, bsc#1101810)\n- CVE-2018-11357: Fix multiple dissectors that could consume excessive memory (bsc#1094301).\n- CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, bsc#1101791)\n- CVE-2018-11354: Fix IEEE 1905.1a dissector crash (bsc#1094301).\n- CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, bsc#1101800)\n\nFurther bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html\n","status":"published","published":"2018-09-27T10:02:56Z","modified":"2026-02-04T02:13:48.056361Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2891-2","title":"Security update for wireshark","description":"This update for wireshark to version 2.4.9 fixes the following issues:\n\nWireshark was updated to 2.4.9 (bsc#1094301, bsc#1106514).\n\nSecurity issues fixed:\n\n- CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)\n- CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)\n- CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)\n- CVE-2018-11355: Fix RTCP dissector crash (bsc#1094301).\n- CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, bsc#1101802)\n- CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, bsc#1101794)\n- CVE-2018-11362: Fix LDSS dissector crash (bsc#1094301).\n- CVE-2018-11361: Fix IEEE 802.11 dissector crash (bsc#1094301).\n- CVE-2018-11360: Fix GSM A DTAP dissector crash (bsc#1094301).\n- CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, bsc#1101777)\n- CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, bsc#1101786)\n- CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, bsc#1101804)\n- CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, bsc#1101776)\n- CVE-2018-11358: Fix Q.931 dissector crash (bsc#1094301).\n- CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, bsc#1101788)\n- CVE-2018-11359: Fix multiple dissectors crashs (bsc#1094301).\n- CVE-2018-11356: Fix DNS dissector crash (bsc#1094301).\n- CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, bsc#1101810)\n- CVE-2018-11357: Fix multiple dissectors that could consume excessive memory (bsc#1094301).\n- CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, bsc#1101791)\n- CVE-2018-11354: Fix IEEE 1905.1a dissector crash (bsc#1094301).\n- CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, bsc#1101800)\n\nFurther bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html\n","status":"published","published":"2018-10-18T12:48:30Z","modified":"2025-05-02T04:07:32.52113Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2020:0693-1","title":"Security update for wireshark","description":"This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n","status":"published","published":"2020-04-08T12:11:42Z","modified":"2026-02-04T04:34:24.153787Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}