PT-2017-13086 · Wireshark+2 · Wireshark+2

Publicado

2017-07-21

·

Atualizado

2024-06-15

·

CVE-2017-13766

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.8 Wireshark version 2.4.0
Description The issue concerns a potential crash with an out-of-bounds write in the Profinet I/O dissector. This was resolved by adding string validation in the plugins/profinet/packet-dcerpc-pn-io.c file.
Recommendations For Wireshark versions 2.2.0 through 2.2.8, update the plugins/profinet/packet-dcerpc-pn-io.c file to include string validation to prevent the out-of-bounds write. For Wireshark version 2.4.0, update the plugins/profinet/packet-dcerpc-pn-io.c file to include string validation to prevent the out-of-bounds write.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2017-1920
ALT-PU-2017-2222
ALT-PU-2018-2487
CVE-2017-13766
DSA-4060-1
MGASA-2017-0328
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:2555-1
SUSE-SU-2018:0054-1

Produtos afetados

Alt Linux
Suse
Wireshark