Input validation

2017-04-1223:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.

CPENameOperatorVersion
wiresharkeq2.0.0
wiresharkeq2.0.4
wiresharkeq2.2.0
wiresharkeq2.0.9
wiresharkeq2.2.2
wiresharkeq2.0.1
wiresharkeq2.2.1
wiresharkeq2.2.4
wiresharkeq2.0.11
wiresharkeq2.0.7

Name	Operator	Version
wireshark	eq	2.0.0
wireshark	eq	2.0.4
wireshark	eq	2.2.0
wireshark	eq	2.0.9
wireshark	eq	2.2.2
wireshark	eq	2.0.1
wireshark	eq	2.2.1
wireshark	eq	2.2.4
wireshark	eq	2.0.11
wireshark	eq	2.0.7