CVE-2017-15191: High severity wireshark vulnerability
Published Oct 10, 2017
·Updated
In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.
Affected Software
4 affected components
Wireshark Wireshark>=2.0.0<=2.0.15
Wireshark Wireshark>=2.2.0<=2.2.9
Wireshark Wireshark>=2.4.0<=2.4.1
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Oct 10, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15191?
CVE-2017-15191 has a medium severity rating due to the potential for application crashes.
2
How do I fix CVE-2017-15191?
To fix CVE-2017-15191, upgrade to Wireshark version 2.4.2 or higher, 2.2.10 or higher, or 2.0.16 or higher.
3
Which versions of Wireshark are affected by CVE-2017-15191?
CVE-2017-15191 affects Wireshark versions 2.0.0 to 2.0.15, 2.2.0 to 2.2.9, and 2.4.0 to 2.4.1.
4
What component of Wireshark is impacted by CVE-2017-15191?
The DMP dissector in Wireshark is the component impacted by CVE-2017-15191.
5
What type of vulnerability is CVE-2017-15191?
CVE-2017-15191 is a denial-of-service vulnerability due to a potential crash in Wireshark.