CVE-2018-7323

Publication date 23 February 2018

Last updated 17 July 2025

Ubuntu priority

Cvss 3 Severity Score

Description

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
wireshark	18.04 LTS bionic	Fixed 2.6.3-1~ubuntu18.04.1
	17.10 artful	Ignored end of life
	16.04 LTS xenial	Fixed 2.6.3-1~ubuntu16.04.1
	14.04 LTS trusty	Fixed 2.6.3-1~ubuntu14.04.1

How can I get the fixes?
What do statuses mean?

Severity score breakdown

Parameter	Value
Base score	7.5 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

MITRE
NVD
Launchpad
Debian

Other references

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14412
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f9199ea8cff56c6704e9828c3d80360b27c4565
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5d45b69b590cabc5127282d1ade3bca1598e5f5c
https://www.wireshark.org/security/wnpa-sec-2018-06.html
https://www.cve.org/CVERecord?id=CVE-2018-7323