CVE-2017-11407

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash

published July 18, 2017

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03031 · 87.3th percentile
Published
2017-07-18T21:00Z
EPSS history
Timeline
  • 18 JUL 21:00Z
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash
    cvelistv5