CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0CVE-2017-13766 – Debian Security Advisory 4060-1
https://notcve.org/view.php?id=CVE-2017-13766
30 Aug 2017 — In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation. En Wireshark 2.4.0 y 2.2.0-2.2.8, el disector Profinet I/O podría fallar con una escritura fuera de límites. Esto se ha tratado en plugins/profinet/packet-dcerpc-pn-io.c añadiendo una validación de strings. It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the diss... • http://www.securityfocus.com/bid/100542 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0CVE-2017-13767
https://notcve.org/view.php?id=CVE-2017-13767
30 Aug 2017 — In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation. En Wireshark 2.4.0, 2.2.0-2.2.8 y 2.0.0-2.0.14, el disector MSDP podría entrar en un bucle infinito. Esto se ha tratado en epan/dissectors/packet-msdp.c añadiendo una validación de longitud. • http://www.securityfocus.com/bid/100549 • CWE-20: Improper Input Validation CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •