PT-2017-17897 · Wireshark+2 · Wireshark+2

Jakub Zawadzki

·

Publicado

2017-04-12

·

Atualizado

2024-06-15

·

CVE-2017-7701

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5
Description The BGP dissector in Wireshark could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by using a different integer data type in the packet-bgp.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.11, update the packet-bgp.c file to use a different integer data type to prevent the infinite loop. For Wireshark versions 2.2.0 through 2.2.5, update the packet-bgp.c file to use a different integer data type to prevent the infinite loop.

Correção

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1470
ALT-PU-2018-2487
CVE-2017-7701
MGASA-2017-0113
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:1174-1
SUSE-SU-2017:1442-1

Produtos afetados

Alt Linux
Suse
Wireshark