Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-11410
HistoryJul 18, 2017 - 9:29 p.m.

Code injection

2017-07-1821:29:00
PRIOn knowledge base
www.prio-n.com
5

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%