PT-2017-13087 · Wireshark+2 · Wireshark+2

Publicado

2017-07-21

·

Atualizado

2024-06-15

·

CVE-2017-13767

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.14 Wireshark versions 2.2.0 through 2.2.8 Wireshark version 2.4.0
Description The MSDP dissector in Wireshark could enter an infinite loop due to lack of length validation. This issue was resolved by adding length validation in the epan/dissectors/packet-msdp.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.14, update to a version that includes the fix for the MSDP dissector infinite loop issue. For Wireshark versions 2.2.0 through 2.2.8, update to a version that includes the fix for the MSDP dissector infinite loop issue. For Wireshark version 2.4.0, update to a version that includes the fix for the MSDP dissector infinite loop issue.

Correção

RCE

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-835

Identificadores relacionados

ALT-PU-2017-1920
ALT-PU-2017-2222
ALT-PU-2018-2487
CVE-2017-13767
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:2555-1
SUSE-SU-2018:0054-1

Produtos afetados

Alt Linux
Suse
Wireshark