Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-11406

Опубликовано: 18 июл. 2017
Источник: debian
EPSS Низкий

Описание

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
wiresharkfixed2.4.0-1package
wiresharkno-dsawheezypackage

Примечания

  • https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797

  • https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=250216263c3a3f2c651e80d9c6b3dc0adc53dc2c

  • https://www.wireshark.org/security/wnpa-sec-2017-36.html

EPSS

Процентиль: 74%
0.00806
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

CVSS3: 5.9
redhat
больше 8 лет назад

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

CVSS3: 7.5
nvd
больше 8 лет назад

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

CVSS3: 7.5
github
больше 3 лет назад

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.

suse-cvrf
больше 8 лет назад

Security update for wireshark

EPSS

Процентиль: 74%
0.00806
Низкий