Wind River Support Network

HomeDefectsLIN8-8450
Fixed

LIN8-8450 : Security Advisory - wireshark - CVE-2017-17935

Created: Dec 29, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 14, 2018
Found In Version: 8.0.0.24
Fix Version: 8.0.0.25
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.

https://nvd.nist.gov/vuln/detail/CVE-2017-17935

Other Downloads


CVEs


Live chat
Online