CVE-2017-13764

Опубликовано: 29 авг. 2017

Источник: redhat

CVSS3: 5.9

EPSS Низкий

Описание

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	wireshark	Will not fix
Red Hat Enterprise Linux 7	wireshark	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1486630wireshark: Modbus dissector crash (wnpa-sec-2017-40)

EPSS

Процентиль: 60%

0.00404

Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVE-2017-13764

CVSS3: 7.5

ubuntu

больше 8 лет назад

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

CVE-2017-13764

CVSS3: 7.5

nvd

больше 8 лет назад

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

CVE-2017-13764

CVSS3: 7.5

debian

больше 8 лет назад

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL point ...

GHSA-hvvw-753h-39jv

CVSS3: 7.5

github

больше 3 лет назад

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation.

EPSS

Процентиль: 60%

0.00404

Низкий

5.9 Medium

CVSS3