PT-2017-18858 · Wireshark+2 · Wireshark+2

Publicado 2017-06-02 · Atualizado 2024-06-15 · CVE-2017-9345

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.12 Wireshark versions 2.2.0 through 2.2.6

Description The DNS dissector in Wireshark could enter an infinite loop due to self-referencing pointers. This issue was addressed by implementing a detection mechanism for such pointers in the epan/dissectors/packet-dns.c file.

Recommendations For Wireshark versions 2.0.0 through 2.0.12, update to a version that includes the fix for the infinite loop issue in the DNS dissector. For Wireshark versions 2.2.0 through 2.2.6, update to a version that includes the fix for the infinite loop issue in the DNS dissector.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1689

ALT-PU-2018-2487

CVE-2017-9345

MGASA-2017-0161

OPENSUSE-SU-2024:11513-1

SUSE-SU-2017:1663-1

SUSE-SU-2017:1664-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 309

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14419 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7321 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-22173 · Nota
• https://suse.com/security/cve/CVE-2017-9344 · Nota
• https://wireshark.org/security/wnpa-sec-2017-25.html · Nota
• https://suse.com/security/cve/CVE-2019-9214 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• https://suse.com/security/cve/CVE-2019-10901 · Nota
• https://suse.com/security/cve/CVE-2019-5719 · Nota
• https://suse.com/security/cve/CVE-2018-11354 · Nota
• https://suse.com/security/cve/CVE-2017-17083 · Nota
• https://suse.com/security/cve/CVE-2018-14343 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7323 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-7701 · Nota
• https://suse.com/security/cve/CVE-2019-10903 · Nota