In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | 2.4.0 (including) | 2.4.9 (including) |
| Wireshark | Wireshark | 2.6.0 (including) | 2.6.3 (including) |
| Wireshark | Ubuntu | bionic | * |
| Wireshark | Ubuntu | esm-apps/bionic | * |
| Wireshark | Ubuntu | esm-apps/xenial | * |
| Wireshark | Ubuntu | esm-infra-legacy/trusty | * |
| Wireshark | Ubuntu | trusty | * |
| Wireshark | Ubuntu | trusty/esm | * |
| Wireshark | Ubuntu | upstream | * |
| Wireshark | Ubuntu | xenial | * |