Improper input validation in Wireshark - CVE-2017-11408
Published: December 9, 2017 / Updated: December 12, 2017
Vulnerability identifier: #VU9650
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-11408
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an error in the AMQP dissector in epan/dissectors/packet-amqp.c when processing network packets. A remote attacker can send a specially crafted packet and crash the vulnerable application.
Affected software
Wireshark
Debian Linux
Arch Linux
Fedora
wireshark (Alpine package)
wireshark
Debian Linux
Arch Linux
Fedora
wireshark (Alpine package)
wireshark
How to mitigate CVE-2017-11408
Update to version 2.2.8 or 2.0.14.
wireshark (Alpine package) - update to 2.0.14-r0
wireshark - update to 2.2.8-1.fc26
wireshark - update to 2.2.8-1.fc26