PT-2017-11987 · Wireshark+2 · Wireshark+2

Publicado

2017-07-18

·

Atualizado

2024-06-15

·

CVE-2017-11406

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.13 Wireshark versions 2.2.0 through 2.2.7
Description The issue is related to the DOCSIS dissector in Wireshark, which could enter an infinite loop due to invalid Frame Control parameter values. This was fixed by rejecting such invalid values in the packet-docsis.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.13, update to a version where the fix for the DOCSIS dissector has been applied. For Wireshark versions 2.2.0 through 2.2.7, update to a version where the fix for the DOCSIS dissector has been applied.

Correção

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2017-1920
ALT-PU-2018-2487
CVE-2017-11406
DLA-1634-1
MGASA-2017-0219
MGASA-2017-0226
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:2032-1
SUSE-SU-2017:2033-1
SUSE-SU-2017_2032-1
SUSE-SU-2017_2033-1

Produtos afetados

Alt Linux
Suse
Wireshark