PT-2017-17094 · Wireshark+1 · Wireshark+1

Publicado 2017-03-03 · Atualizado 2024-06-15 · CVE-2017-6474

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.10 Wireshark versions 2.2.0 through 2.2.4

Description The issue is related to an infinite loop in the NetScaler file parser, triggered by a malformed capture file. This was addressed by validating record sizes in wiretap/netscaler.c.

Recommendations For Wireshark versions 2.0.0 through 2.0.10, update to a version that includes the fix for the infinite loop in the NetScaler file parser. For Wireshark versions 2.2.0 through 2.2.4, update to a version that includes the fix for the infinite loop in the NetScaler file parser.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1260

CVE-2017-6474

DLA-858-1

DSA-3811-1

OPENSUSE-SU-2024:11513-1

Produtos afetados

Alt Linux

Wireshark

Referências · 196

• https://suse.com/security/cve/CVE-2017-9353 · Nota
• https://suse.com/security/cve/CVE-2018-7337 · Nota
• https://suse.com/security/cve/CVE-2017-17085 · Nota
• https://suse.com/security/cve/CVE-2018-9263 · Nota
• https://suse.com/security/cve/CVE-2006-5740 · Nota
• https://suse.com/security/cve/CVE-2021-22173 · Nota
• https://suse.com/security/cve/CVE-2020-26420 · Nota
• https://suse.com/security/cve/CVE-2017-9344 · Nota
• https://suse.com/security/cve/CVE-2019-9214 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13429 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-10901 · Nota
• https://suse.com/security/cve/CVE-2017-7747 · Nota
• https://suse.com/security/cve/CVE-2020-26419 · Nota
• https://suse.com/security/cve/CVE-2017-7746 · Nota