CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources.

• CWE-20

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14472Exploit, Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2d4695de1477df60b0188fd581c0c279db601978
• https://lists.debian.org/debian-lts-announce/2018/05/msg00019.htmlMailing List, Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2018-21.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14472Exploit, Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2d4695de1477df60b0188fd581c0c279db601978
• https://lists.debian.org/debian-lts-announce/2018/05/msg00019.htmlMailing List, Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2018-21.htmlVendor Advisory

Published

Apr 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9249FiberHome VDSL2 Modem HG 150-UB devices allow authentication…
• CVE-2018-9250interface\super\edit_list.php in OpenEMR before v5_0_1_1 all…
• CVE-2018-9251The xz_decomp function in xzlib.c in libxml2 2.9.8, if --wit…
• CVE-2018-9252JasPer 2.0.14 allows denial of service via a reachable asser…
• CVE-2018-9256In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP d…
• CVE-2018-9257In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into…
• CVE-2018-9259In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dis…
• CVE-2018-9260In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 80…
• CVE-2018-9261In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP di…
• CVE-2018-9262In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN di…
• CVE-2018-9263In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerbero…
• CVE-2018-9264In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dis…