Wind River Support Network

Home CVE Database CVE-2017-17935

CVE-2017-17935

Description

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip \'\\n\' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

Priority: MEDIUM

CVSS v3: 7.5

Component: wireshark

Publish Date: Dec 27, 2017

Related ID: --

CVSS v2: High

Modified Date: Dec 27, 2017

Find out more about CVE-2017-17935 from the MITRE-CVE dictionary and NIST NVD

Products Affected

Product Name	Status	Defect	Fixed	Downloads
Linux
Wind River Linux LTS 17	Fixed	LIN10-2925	10.17.41.3	Wind River Linux LTS 10.17.41.3 Wind River Linux LTS 10.17.41.4 Wind River Linux LTS 10.17.41.5 Wind River Linux LTS 10.17.41.6 Wind River Linux LTS 10.17.41.7 Wind River Linux LTS 10.17.41.8 Wind River Linux LTS 10.17.41.9 Wind River Linux LTS 10.17.41.10 Wind River Linux LTS 10.17.41.11 Wind River Linux LTS 10.17.41.12 Wind River Linux LTS 10.17.41.13 Wind River Linux LTS 10.17.41.14 Wind River Linux LTS 10.17.41.15 Wind River Linux LTS 10.17.41.16 Wind River Linux LTS 10.17.41.17 Wind River Linux LTS 10.17.41.18 Wind River Linux LTS 10.17.41.20 Wind River Linux LTS 10.17.41.21 Wind River Linux LTS 10.17.41.22 Wind River Linux LTS 10.17.41.23 Wind River Linux LTS 10.17.41.24 Wind River Linux LTS 10.17.41.25 Wind River Linux LTS 10.17.41.26 Wind River Linux LTS 10.17.41.27
Wind River Linux 8	Fixed	LIN8-8450	8.0.0.25	--
Wind River Linux 9	Fixed	LIN9-6098	9.0.0.14	--
Wind River Linux 7	Fixed	--	7.0.0.28	--
Wind River Linux LTS 21	Won't Fix	--	--	--
Wind River Linux LTS 22	Won't Fix	--	--	--
Wind River Linux LTS 18	Won't Fix	--	--	--
Wind River Linux LTS 19	Won't Fix	--	--	--
Wind River Linux CD release	Won't Fix	--	--	--
Wind River Linux 6	Not Vulnerable	--	--	--
Wind River Linux LTS 23	Won't Fix	--	--	--
VxWorks
VxWorks 7	Not Vulnerable	--	--	--
VxWorks 6.9	Not Vulnerable	--	--	--
Helix Virtualization Platform Cert Edition
Helix Virtualization Platform Cert Edition	Not Vulnerable	--	--	--

Related Products

Product Name	Status	Defect	Fixed	Downloads

Notes
Requires LTSS - customers must have active LTSS (Long Term Security Shield) Support to receive up-to-date information about vulnerabilities that may affect legacy software. Please contact your Wind River account team or see https://docs.windriver.com/bundle/Support_and_Maintenance_Supplemental_Terms_and_Conditions and https://support2.windriver.com/index.php?page=plc for more information.