PT-2017-18859 · Wireshark+2 · Wireshark+2

Publicado

2017-06-02

·

Atualizado

2024-06-15

·

CVE-2017-9346

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.12 Wireshark versions 2.2.0 through 2.2.6
Description The issue arises in the SoulSeek dissector, which could enter an infinite loop. This was resolved by making loop bounds more explicit in the epan/dissectors/packet-slsk.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.12, update to a version where the loop bounds in the SoulSeek dissector are made more explicit to prevent infinite loops. For Wireshark versions 2.2.0 through 2.2.6, update to a version where the loop bounds in the SoulSeek dissector are made more explicit to prevent infinite loops.

Correção

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1689
ALT-PU-2018-2487
CVE-2017-9346
MGASA-2017-0161
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:1663-1
SUSE-SU-2017:1664-1

Produtos afetados

Alt Linux
Suse
Wireshark