PT-2017-11990 · Wireshark+1 · Wireshark+1

Published 2016-09-11 · Updated 2019-10-03 · CVE-2017-11409

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.13

Description The issue is related to the GPRS LLC dissector in Wireshark, which could enter a large loop. This was resolved by changing the integer data type used in the dissector.

Recommendations For Wireshark versions 2.0.0 through 2.0.13, update the epan/dissectors/packet-gprs-llc.c file to use a different integer data type to prevent the dissector from going into a large loop.

Fix

Weakness Enumeration

CWE-834

Related Identifiers

ALT-PU-2016-1965

CVE-2017-11409

DLA-1634-1

MGASA-2017-0219

Affected Products

Alt Linux

Wireshark

References · 98

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9263 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7747 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9267 · Security Note
• https://bdu.fstec.ru/vul/2019-00923 · Security Note
• https://osv.dev/vulnerability/DLA-1634-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7176 · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0219 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-11409 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7703 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7700 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19622 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7746 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19626 · Security Note
• https://advisories.mageia.org/MGASA-2017-0219.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7323 · Security Note