Vulnerability CVE-2017-17084: Information

Description

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.

Severity: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2017-17084
Published: Dec. 1, 2017
Modified: Nov. 7, 2023
Error type identifier: CWE-754

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
wiresharksisyphus2.4.3-alt1.S14.2.5-alt2ALT-PU-2017-2780-1196074Fixed
wiresharkp102.4.3-alt1.S14.0.11-alt1ALT-PU-2017-2780-1196074Fixed
wiresharkp92.4.3-alt1.S14.0.8-alt1ALT-PU-2017-2780-1196074Fixed
wiresharkp82.4.3-alt1.M80P.13.0.6-alt1ALT-PU-2017-2800-1196267Fixed
wiresharkc10f12.4.3-alt1.S14.0.11-alt1ALT-PU-2017-2780-1196074Fixed
wiresharkc9f22.4.3-alt1.S14.0.11-alt1ALT-PU-2017-2780-1196074Fixed
wiresharkp112.4.3-alt1.S14.2.5-alt2ALT-PU-2017-2780-1196074Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.wireshark.org/security/wnpa-sec-2017-47.html
  • Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14236
  • Issue Tracking
  • Vendor Advisory
102030
  • Third Party Advisory
  • VDB Entry
DSA-4060
  • Third Party Advisory
[debian-lts-announce] 20171231 [SECURITY] [DLA 1226-1] wireshark security update
    https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8502fe94ef9e431860921507e1a351c5e3f5c634

        1. Configuration 1

          cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.4.0:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.8:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.9:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.4.1:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.2.10:*:*:*:*:*:*:*
          cpe:2.3:a:wireshark:wireshark:2.4.2:*:*:*:*:*:*:*

          Configuration 2

          cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.5.3
      Back to top