PT-2017-18863 · Wireshark+2 · Wireshark+2

Publicado

2017-06-02

·

Atualizado

2024-06-15

·

CVE-2017-9350

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.12 Wireshark versions 2.2.0 through 2.2.6
Description The openSAFETY dissector in Wireshark could crash or exhaust system memory due to a negative length. This issue was addressed by adding a check for negative length in the epan/dissectors/packet-opensafety.c file.
Recommendations For Wireshark versions 2.0.0 through 2.0.12, update to a version that includes the fix for the openSAFETY dissector issue. For Wireshark versions 2.2.0 through 2.2.6, update to a version that includes the fix for the openSAFETY dissector issue.

Correção

RCE

Allocation of Resources Without Limits

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-770

Identificadores relacionados

ALT-PU-2017-1689
ALT-PU-2017-1920
ALT-PU-2018-2487
CVE-2017-9350
MGASA-2017-0161
OPENSUSE-SU-2024:11513-1
SUSE-SU-2017:1663-1
SUSE-SU-2017:1664-1

Produtos afetados

Alt Linux
Suse
Wireshark