Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-7335: Wireshark may crash when analyzing certain Wi‑Fi captures

CVE-2018-7335 · published 8 years ago

Summary

Versions of Wireshark between 2.2.0‑2.2.12 and 2.4.0‑2.4.4 can unexpectedly stop working when they process some Wi‑Fi packet data. The problem could interrupt network troubleshooting or monitoring. Updating Wireshark to a newer version that includes the fix will prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
wireshark	wireshark	>= 2.2.0, <= 2.2.12 >= 2.4.0, <= 2.4.4 `cpe:2.3:a:wireshark:wireshark::::::::`
debian	debian_linux	7.0 8.0 9.0 `cpe:2.3:o:debian:debian_linux:7.0:::::::*`

Original advisory text

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small.

References

http://www.securityfocus.com/bid/103165 Third Party Advisory VDB Entry
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14442 Issue Tracking Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2901dcf...
https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html Mailing List Third Party Advisory
https://www.debian.org/security/2018/dsa-4217 Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2018-05.html Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

3% chance of attack within 30 days

Timeline

Published23 Feb 2018

Updated30 Oct 2026

First seen29 Sep 2026

Sources

CVE-2018-7335 · NVD

Track software like this

Free during beta