vulnerability

Wireshark : CVE-2018-5336 : Multiple dissectors could crash

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Jan 11, 2018
Added
Jan 15, 2018
Modified
Aug 11, 2025

Description

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth.

Solutions

wireshark-upgrade-2_2_12wireshark-upgrade-2_4_4
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.