Wind River Support Network

HomeDefectsLIN9-6098
Fixed

LIN9-6098 : Security Advisory - wireshark - CVE-2017-17935

Created: Dec 29, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 16, 2018
Found In Version: 9.0.0.13
Fix Version: 9.0.0.14
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

https://nvd.nist.gov/vuln/detail/CVE-2017-17935

Other Downloads


CVEs


Live chat
Online