Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2017-15192

Published: 10/10/2017 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Wireshark

Vulnerability Summary

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 2.2.6

wireshark wireshark 2.2.0

wireshark wireshark 2.4.0

wireshark wireshark 2.2.2

wireshark wireshark 2.2.1

wireshark wireshark 2.2.4

wireshark wireshark 2.2.5

wireshark wireshark 2.2.7

wireshark wireshark 2.2.8

wireshark wireshark 2.2.3

wireshark wireshark 2.2.9

wireshark wireshark 2.4.1

Vendor Advisories

Red Hat: CVE-2017-15192
In Wireshark 240 to 241 and 220 to 229, the BT ATT dissector could crash This was addressed in epan/dissectors/packet-btattc by considering a case where not all of the BTATT packets have the same encapsulation level ...
Arch Linux Issues:
A flaw has been discovered in wireshark before 242 in the BT ATT dissector leading to application crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file ...

References

NVD-CWE-noinfohttps://www.wireshark.org/security/wnpa-sec-2017-42.htmlhttps://code.wireshark.org/review/23470https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14049http://www.securityfocus.com/bid/101235https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3689dc1db36037436b1616715f9a3f888fc9a0f6https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2017-15192https://security.archlinux.org/CVE-2017-15192
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook