CVE-2017-9351

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer

published June 2, 2017

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02829 · 86.4th percentile
Published
2017-06-02T05:04Z
EPSS history
Timeline
  • 02 JUN 05:04Z
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer
    cvelistv5