CVE-2017-9347
High · 7.5CVSS
7.5
EPSS
13.8%
Published
Jun 2, 2017
CISA due date
—
The record
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.5 | wireshark | 0 | 2.2.7-r0 |
| Debian:11 | wireshark | 0 | 2.2.7-1 |
| Debian:12 | wireshark | 0 | 2.2.7-1 |
| Debian:13 | wireshark | 0 | 2.2.7-1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Server 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| Ubuntu:14.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu14.04.1 |
| Ubuntu:16.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu16.04.1 |
| Ubuntu:18.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu18.04.1 |
| openSUSE:Tumbleweed | wireshark | 0 | 3.4.8-1.2 |
Related vulnerabilities
- CVE-2017-17085 In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. Also affects wireshark
- CVE-2017-9353 In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. Also affects wireshark
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark
- CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows… Also affects wireshark
- CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or… Also affects wireshark
- CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of… Also affects wireshark
- CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of… Also affects wireshark
- CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to… Also affects wireshark