Linux Distros Unpatched Vulnerability : CVE-2017-17085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating th...

Fedora 27 : 1:wireshark (2017-3997279e65)

New upstream version 2.4.3. It contains fixes for CVE-2017-17084, CVE-2017-17083 and CVE-2017-17085. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much ...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0054-1)

This update for wireshark to version 2.2.11 fixes several issues. These security issues were fixed : - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation bsc1056248 - CVE-2017-13766: The Profinet I/O dissector could have crash...

SUSE-SU-2018:0054-1 Security update for wireshark

This update for wireshark to version 2.2.11 fixes several issues. These security issues were fixed: - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation bsc1056248 - CVE-2017-13766: The Profinet I/O dissector could have crash...

[SECURITY] [DLA 1226-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u8 CVE ID : CVE-2017-11408 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:3436-1)

This update for wireshark fixes the following issues : - CVE-2017-17083: NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer. bsc1070727 - CVE-2017-17084: IWARPMPA dissector could crash...

Wireshark Security Updates (wnpa-sec-2017-49_wnpa-sec-2017-47) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : wireshark (openSUSE-2017-1337)

This update for wireshark to version 2.2.11 fixes the following issues : Minor vulnerabilities that could be used to trigger dissector crashes by making Wireshark read specially crafted packages from the network or capture files boo1070727 : - CVE-2017-17084: IWARPMPA dissector crash...

FreeBSD : wireshark -- multiple security issues (4b228e69-22e1-4019-afd0-8aa716d0ec0b)

wireshark developers reports : wnpa-sec-2017-47: The IWARPMPA dissector could crash. CVE-2017-17084 wnpa-sec-2017-48: The NetBIOS dissector could crash. Discovered by Kamil Frankowicz. CVE-2017-17083 wnpa-sec-2017-49: The CIP Safety dissector could crash. CVE-2017-17085 %NASLMINLEVEL 70300 C...

Security fix for the ALT Linux 9 package wireshark version 2.4.3-alt1

Dec. 9, 2017 Anton Farygin 2.4.3-alt1 - 2.4.3 - fixes: wnpa-sec-2017-49 CIP Safety dissector crash CVE-2017-17085 wnpa-sec-2017-48 NetBIOS dissector crash CVE-2017-17083 wnpa-sec-2017-47 IWARPMPA dissector crash CVE-2017-17084...

CVE-2017-17085

creationtimestamp| type| source ---|---|--- 2017-12-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43233...

CVE-2017-17085

CVE-2017-17085 affects Wireshark 2.4.0–2.4.2 and 2.2.0–2.2.10; the CIP Safety dissector could crash due to missing validation of packet length. The issue is fixed by validating the packet length in epan/dissectors/packet-cipsafety.c. Impact is a crash (denial of service) as described; remediation...

wireshark -- multiple security issues

wireshark developers reports: wnpa-sec-2017-47: The IWARPMPA dissector could crash. CVE-2017-17084 wnpa-sec-2017-48: The NetBIOS dissector could crash. Discovered by Kamil Frankowicz. CVE-2017-17083 wnpa-sec-2017-49: The CIP Safety dissector could crash. CVE-2017-17085...