CVE-2017-9353
High · 7.5CVSS
7.5
EPSS
14.0%
Published
Jun 2, 2017
CISA due date
—
The record
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.5 | wireshark | 0 | 2.2.7-r0 |
| Debian:10 | wireshark | 0 | 2.2.7-1 |
| Debian:11 | wireshark | 0 | 2.2.7-1 |
| Debian:12 | wireshark | 0 | 2.2.7-1 |
| Debian:13 | wireshark | 0 | 2.2.7-1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Server 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | wireshark | 0 | 2.0.13-39.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | wireshark | 0 | 2.2.7-47.1 |
| Ubuntu:14.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu14.04.1 |
| Ubuntu:16.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu16.04.1 |
| Ubuntu:18.04:LTS | wireshark | 0 | 2.6.3-1~ubuntu18.04.1 |
| openSUSE:Tumbleweed | wireshark | 0 | 3.4.8-1.2 |
Related vulnerabilities
- CVE-2017-17085 In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. Also affects wireshark
- CVE-2017-9347 In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer… Also affects wireshark
- CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows… Also affects wireshark
- CVE-2012-1593 epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12… Also affects wireshark
- CVE-2011-3360 Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before… Also affects wireshark
- CVE-2011-1140 Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and… Also affects wireshark
- CVE-2009-1210 Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and… Also affects wireshark
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark