PT-2017-17899
CVE-2017-7703
·
Published
2017-04-12
·
Updated
2024-06-15
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wireshark versions 2.0.0 through 2.0.11
Wireshark versions 2.2.0 through 2.2.5
Description
The IMAP dissector could crash due to packet injection or a malformed capture file. This issue was addressed by correctly calculating a line's end in the epan/dissectors/packet-imap.c file.
Recommendations
For Wireshark versions 2.0.0 through 2.0.11, update to a version where the issue is fixed.
For Wireshark versions 2.2.0 through 2.2.5, update to a version where the issue is fixed.
Found an issue in the description? Have something to add? Feel free to write us 👾