PT-2017-14699
CVE-2017-17083
·
Published
2017-12-01
·
Updated
2024-06-15
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.2.0 through 2.2.10
Wireshark versions 2.4.0 through 2.4.2
Description
The issue concerns a potential crash in the NetBIOS dissector. This was resolved by modifying the
epan/dissectors/packet-netbios.c file to ensure that write operations are properly bounded within a buffer, preventing a crash.Recommendations
For Wireshark versions 2.2.0 through 2.2.10, update to a version where the
epan/dissectors/packet-netbios.c file has been modified to include bounds checking for write operations.
For Wireshark versions 2.4.0 through 2.4.2, update to a version where the epan/dissectors/packet-netbios.c file has been modified to include bounds checking for write operations. Found an issue in the description? Have something to add? Feel free to write us 👾