CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2017-13765
https://notcve.org/view.php?id=CVE-2017-13765
30 Aug 2017 — In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation. En Wireshark 2.4.0, 2.2.0-2.2.8 y 2.0.0-2.0.14, el disector IrCOMM tiene una vulnerabilidad de sobrelectura de búfer y de fallo de aplicación. Esto se ha tratado en plugins/irda/packet-ircomm.c añadiendo una validación de longitud. • http://www.securityfocus.com/bid/100551 • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0CVE-2017-13766 – Debian Security Advisory 4060-1
https://notcve.org/view.php?id=CVE-2017-13766
30 Aug 2017 — In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation. En Wireshark 2.4.0 y 2.2.0-2.2.8, el disector Profinet I/O podría fallar con una escritura fuera de límites. Esto se ha tratado en plugins/profinet/packet-dcerpc-pn-io.c añadiendo una validación de strings. It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the diss... • http://www.securityfocus.com/bid/100542 • CWE-787: Out-of-bounds Write •