CVE-2017-11411

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory

published July 18, 2017

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01292 · 70.0th percentile
Published
2017-07-18T21:00Z
EPSS history
Timeline
  • 18 JUL 21:00Z
    In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory
    cvelistv5