Published: 02/06/2017 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark

Debian Bug report logs - #864058 New wireshark issues Package: src:wireshark; Maintainer for src:wireshark is Balint Reczey <rbalint@ubuntucom>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sat, 3 Jun 2017 18:39:01 UTC Severity: important Tags: security, upstream Found in version wireshark/226+g32dac6a ...

An issue has been found in the ROS dissector of Wireshark < 227, where an NULL pointer dereference can be triggered by injecting a malicious packet into the wire or by convincing someone to read a malformed packet trace file ...

Source: bugswiresharkorg/bugzilla/show_bugcgi?id=13637 Build Information: TShark (Wireshark) 230 (v230rc0-3235-gd97ce76161) Copyright 1998-2017 Gerald Combs <gerald@wiresharkorg> and contributors License GPLv2+: GNU GPL version 2 or later <wwwgnuorg/licenses/old-licenses/gpl-20html> This is free software; s ...

CWE-476 https://www.wireshark.org/security/wnpa-sec-2017-31.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13637 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1216 http://www.securityfocus.com/bid/98800 http://www.securitytracker.com/id/1038612 https://www.exploit-db.com/exploits/42124/https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=278e52f26e7e1a23f8d2e8ed98693328c992bdce https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864058 https://nvd.nist.gov https://www.exploit-db.com/exploits/42124/https://security.archlinux.org/CVE-2017-9347

CVE-2017-9347

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect