PT-2017-18862 · Wireshark+2 · Wireshark+2

Publicado 2017-06-02 · Atualizado 2024-06-15 · CVE-2017-9349

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.12 Wireshark versions 2.2.0 through 2.2.6

Description The issue is related to an infinite loop in the DICOM dissector. This occurs due to a failure to validate a length value, which was addressed in the epan/dissectors/packet-dcm.c file.

Recommendations For Wireshark versions 2.0.0 through 2.0.12, update to a version that includes the fix for the infinite loop in the DICOM dissector. For Wireshark versions 2.2.0 through 2.2.6, update to a version that includes the fix for the infinite loop in the DICOM dissector.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-1689

ALT-PU-2018-2487

CVE-2017-9349

DLA-1729-1

MGASA-2017-0161

OPENSUSE-SU-2024:11513-1

SUSE-SU-2017:1663-1

SUSE-SU-2017:1664-1

Produtos afetados

Alt Linux

Suse

Wireshark

Referências · 317

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14419 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7321 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-22173 · Nota
• https://suse.com/security/cve/CVE-2017-9344 · Nota
• https://wireshark.org/security/wnpa-sec-2017-25.html · Nota
• https://suse.com/security/cve/CVE-2019-9214 · Nota
• https://suse.com/security/cve/CVE-2017-7745 · Nota
• https://suse.com/security/cve/CVE-2019-10901 · Nota
• https://suse.com/security/cve/CVE-2019-5719 · Nota
• https://suse.com/security/cve/CVE-2018-11354 · Nota
• https://suse.com/security/cve/CVE-2017-17083 · Nota
• https://suse.com/security/cve/CVE-2018-14343 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7323 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-7701 · Nota
• https://suse.com/security/cve/CVE-2019-10903 · Nota