PT-2017-11990 · Wireshark+1 · Wireshark+1

Publicado 2016-09-11 · Atualizado 2019-10-03 · CVE-2017-11409

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.13

Description The issue is related to the GPRS LLC dissector in Wireshark, which could enter a large loop. This was resolved by changing the integer data type used in the dissector.

Recommendations For Wireshark versions 2.0.0 through 2.0.13, update the epan/dissectors/packet-gprs-llc.c file to use a different integer data type to prevent the dissector from going into a large loop.

Correção

Enumeração de Fraquezas

CWE-834

Identificadores relacionados

ALT-PU-2016-1965

CVE-2017-11409

DLA-1634-1

MGASA-2017-0219

Produtos afetados

Alt Linux

Wireshark

Referências · 98

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9263 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7747 · Nota de Segurança
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14482 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9267 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00923 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-1634-1 · Aviso do Fabricante
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15130 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7176 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2017-0219 · Aviso do Fabricante
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14469 · Nota
• https://ubuntu.com/security/CVE-2017-11409 · Aviso do Fabricante
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14484 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7703 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7700 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19622 · Nota de Segurança