CVE-2017-17935: High severity wireshark vulnerability
The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17935?
CVE-2017-17935 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2017-17935?
To fix CVE-2017-17935, upgrade Wireshark to version 2.2.12 or later where the vulnerability has been addressed.
What versions of Wireshark are affected by CVE-2017-17935?
CVE-2017-17935 affects Wireshark versions up to and including 2.2.11.
Can CVE-2017-17935 be exploited remotely?
Yes, CVE-2017-17935 can be exploited remotely through crafted packets that cause the application to crash.
Is Debian GNU/Linux 8.0 affected by CVE-2017-17935?
Yes, Debian GNU/Linux 8.0 is affected if it runs a vulnerable version of Wireshark.