CVE-2017-9350

High

Published: 02/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Wireshark versions 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed by checking for a negative length.

Risk Assessment

The organization may experience application crashes or system performance issues, potentially leading to data loss or service downtime.

Recommendation

It is recommended to update Wireshark to the latest version to mitigate this vulnerability.

Other vulnerabilities in Wireshark openSAFETY dissector

CVE-2017-11411High
In Wireshark versions through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed by adding length validation.

Original NVD description (English source)

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length.