high7.5
CVE-2018-16056
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash.
Impact
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | from 2.2.0 through 2.2.16 from 2.4.0 through 2.4.8 from 2.6.0 through 2.6.2 |
| Debian | Debian Linux | Version 9.0 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- http://www.securityfocus.com/bid/105174
- http://www.securitytracker.com/id/1041609
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485
- https://www.debian.org/security/2018/dsa-4315
- https://www.wireshark.org/security/wnpa-sec-2018-45.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- http://www.securityfocus.com/bid/105174
- http://www.securitytracker.com/id/1041609
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485
- https://www.debian.org/security/2018/dsa-4315
- https://www.wireshark.org/security/wnpa-sec-2018-45.html