CVE-2018-9274
Publication date 4 April 2018
Last updated 17 July 2025
Ubuntu priority
Description
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| wireshark | 18.04 LTS bionic |
Fixed 2.6.3-1~ubuntu18.04.1
|
| 16.04 LTS xenial |
Fixed 2.6.3-1~ubuntu16.04.1
|
|
| 14.04 LTS trusty |
Fixed 2.6.3-1~ubuntu14.04.1
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.5 · High
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
References
Other references
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14489
- https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=211845aba4794720ae265c782cdffddae54a3e7a
- https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f38e895dfc0d97bce64f73ce99df706911d9aa07
- https://www.wireshark.org/security/wnpa-sec-2018-24.html
- https://www.cve.org/CVERecord?id=CVE-2018-9274