PT-2017-17898 · Wireshark+2 · Wireshark+2

Publicado

2017-04-12

·

Atualizado

2024-06-15

·

CVE-2017-7702

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5
Description The WBXML dissector could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by adding length validation in epan/dissectors/packet-wbxml.c.
Recommendations For Wireshark versions 2.0.0 through 2.0.11, update the dissector to include length validation to prevent infinite loops. For Wireshark versions 2.2.0 through 2.2.5, update the dissector to include length validation to prevent infinite loops.

Correção

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1470
ALT-PU-2017-1920
ALT-PU-2018-2487
CVE-2017-7702
MGASA-2017-0113
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:1174-1
SUSE-SU-2017:1442-1

Produtos afetados

Alt Linux
Suse
Wireshark