CVE-2017-17085

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash

published December 1, 2017

CVSS
—
EPSS
17%
Percentile
97.0
In the wild
Unconfirmed
What it is

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16655 · 97.0th percentile
Published
2017-12-01T08:00Z
EPSS history
Timeline
  • 01 DEC 08:00Z
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash
    cvelistv5