CVE-2018-11357: Debian Linux

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths.

Affected products

• Debian Debian Linux: version 8.0 only
• Wireshark Wireshark: from 2.2.0, up to and including 2.2.14; from 2.4.0, up to and including 2.4.6; version 2.6.0 only

Published 2018-05-22. Last modified 2026-06-17.