In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | * | 2.2.11 (including) |
| Wireshark | Ubuntu | bionic | * |
| Wireshark | Ubuntu | trusty | * |
| Wireshark | Ubuntu | upstream | * |
| Wireshark | Ubuntu | xenial | * |
| Wireshark | Ubuntu | zesty | * |