DCOM Dissector Crash Vulnerability in Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10

CVE-2018-19626 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.

Learn more about our Web Application Penetration Testing UK.