CVE-2017-9351: Buffer Overflow
First published: Fri Jun 02 2017(Updated: )
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=2.0.0<=2.0.12 | |
| Wireshark Wireshark | >=2.2.0<=2.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/98808
- http://www.securitytracker.com/id/1038612
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1153
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1183
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13609
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13628
- https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a6e033c14da13bd5f72dfe07a347586517639d12
- https://www.wireshark.org/security/wnpa-sec-2017-24.html
Frequently Asked Questions
What is the severity of CVE-2017-9351?
CVE-2017-9351 is classified as a medium severity vulnerability.
How do I fix CVE-2017-9351?
To fix CVE-2017-9351, upgrade Wireshark to version 2.2.7 or later if you are using the 2.2.x series, or to version 2.0.13 or later if you are using the 2.0.x series.
Which versions of Wireshark are affected by CVE-2017-9351?
Wireshark versions from 2.0.0 to 2.0.12 and from 2.2.0 to 2.2.6 are affected by CVE-2017-9351.
What type of vulnerability is CVE-2017-9351?
CVE-2017-9351 is a buffer overflow vulnerability in the DHCP dissector of Wireshark.
Who is impacted by CVE-2017-9351?
Users of affected versions of Wireshark who analyze DHCP packets could be impacted by CVE-2017-9351.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/2.0.0
- version/wireshark wireshark/2.0.12
- version/wireshark wireshark/2.2.0
- version/wireshark wireshark/2.2.6