CVE-2017-7705 in Wireshark

Riassunto

di MITRE

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 11/04/2017
• Divulgazione: 12/04/2017
• Moderazione: accettato
• Voce: VDB-99751
• CPE: pronto
• CWE: CWE-399 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.02731
• KEV: no
• Attività: molto basso
• Settore: Police, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7705
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7705
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7705/