CVE-2017-17085
High · 7.5CVSS
7.5
EPSS
16.7%
Published
Dec 1, 2017
CISA due date
—
The record
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.5 | wireshark | 0 | 2.2.11-r0 |
| Debian:11 | wireshark | 0 | 2.4.3-1 |
| Debian:12 | wireshark | 0 | 2.4.3-1 |
| Debian:13 | wireshark | 0 | 2.4.3-1 |
| Debian:7 | wireshark | 0 | 1.12.1+g01b65bf-4+deb8u6~deb7u8 |
| Debian:8 | wireshark | 0 | 1.12.1+g01b65bf-4+deb8u12 |
| Debian:9 | wireshark | 0 | 2.2.6+g32dac6a-2+deb9u1 |
| Mageia:6 | wireshark | 0 | 2.2.11-1.mga6 |
| SUSE:Linux Enterprise Desktop 12 SP2 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Desktop 12 SP3 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Server 11 SP4 | libsmi | 0 | 0.4.5-2.7.2.1 |
| SUSE:Linux Enterprise Server 11 SP4 | portaudio | 0 | 19-234.18.1 |
| SUSE:Linux Enterprise Server 11 SP4 | wireshark | 0 | 2.2.11-40.14.5 |
| SUSE:Linux Enterprise Server 12 SP2 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Server 12 SP3 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | libsmi | 0 | 0.4.5-2.7.2.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | portaudio | 0 | 19-234.18.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | wireshark | 0 | 2.2.11-40.14.5 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | libsmi | 0 | 0.4.5-2.7.2.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | portaudio | 0 | 19-234.18.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | wireshark | 0 | 2.2.11-40.14.5 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | wireshark | 0 | 2.2.11-48.15.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | wireshark | 0 | 2.2.11-48.15.3 |
| Ubuntu:14.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu14.04.1 |
| Ubuntu:16.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu16.04.1 |
| Ubuntu:18.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu18.04.1 |
| openSUSE:Tumbleweed | wireshark | 0 | 3.4.8-1.2 |
Related vulnerabilities
- CVE-2017-9353 In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. Also affects wireshark
- CVE-2017-9347 In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer… Also affects wireshark
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark
- CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows… Also affects wireshark
- CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or… Also affects wireshark
- CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of… Also affects wireshark
- CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of… Also affects wireshark
- CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to… Also affects wireshark