CVE-2017-11407

2017-07-1821:29:00

Google

osv.dev

0.004 Low

EPSS

Percentile

73.5%

JSON

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.

CPENameOperatorVersion
wiresharkeqwireshark-2.2.0
wiresharkeq1.10.3-r1
wiresharkeq2.0.13rc0
wiresharkeqwireshark-2.0.11
wiresharkeqwireshark-2.0.1
wiresharkeq2.0.8
wiresharkeq1.10.7-r0
wiresharkeq1.4.5-r0
wiresharkeq2.2.2
wiresharkeq2.2.4rc0

Name	Operator	Version
wireshark	eq	wireshark-2.2.0
wireshark	eq	1.10.3-r1
wireshark	eq	2.0.13rc0
wireshark	eq	wireshark-2.0.11
wireshark	eq	wireshark-2.0.1
wireshark	eq	2.0.8
wireshark	eq	1.10.7-r0
wireshark	eq	1.4.5-r0
wireshark	eq	2.2.2
wireshark	eq	2.2.4rc0