CVE-2017-11411

High

Published: 18/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Wireshark versions through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed by adding length validation.

Risk Assessment

The vulnerability may lead to application crashes or resource exhaustion, potentially affecting service availability within the organization.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability and other known issues.

Other vulnerabilities in Wireshark openSAFETY dissector

CVE-2017-9350High
In Wireshark versions 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed by checking for a negative length.

Original NVD description (English source)

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.