Wireshark vulnerability wnpa-sec-2018-28

Description

It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Analysis

The LTP dissector and other dissectors could consume excessive memory.

Affected Applications

Wireshark

CVE References

CVE-2018-11357

Other References

https://www.wireshark.org/security/wnpa-sec-2018-28.html