Lucene search

K
cvelistMitreCVELIST:CVE-2017-11410
HistoryJul 18, 2017 - 9:00 p.m.

CVE-2017-11410

2017-07-1821:00:00
mitre
www.cve.org
2

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%