Lucene search

K
osvGoogleOSV:CVE-2018-14340
HistoryJul 19, 2018 - 2:29 a.m.

CVE-2018-14340

2018-07-1902:29:00
Google
osv.dev
6

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.6%

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.