CVE-2017-11411

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-11411

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11411.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-11411

Downstream

DEBIAN (1)

DEBIAN-CVE-2017-11411

MGASA (2)

SUSE (2)

UBUNTU (1)

UBUNTU-CVE-2017-11411

Related

SUSE (2)

Published

2017-07-18T21:29:00Z

Modified

2026-10-20T10:47:57Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type

GIT

Repo

https://github.com/wireshark/wireshark

Events

Introduced

9a73b827b22c7ce9132e939b9f07ec4425fc2aa6

Last Affected

1861a96ba1d22e80e331373cf44df029d356ec42

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0"
                },
                {
                    "last_affected":  "2.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.1"
                },
                {
                    "last_affected":  "2.0.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.2"
                },
                {
                    "last_affected":  "2.0.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.3"
                },
                {
                    "last_affected":  "2.0.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.4"
                },
                {
                    "last_affected":  "2.0.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.5"
                },
                {
                    "last_affected":  "2.0.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.6"
                },
                {
                    "last_affected":  "2.0.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.7"
                },
                {
                    "last_affected":  "2.0.7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.8:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.8"
                },
                {
                    "last_affected":  "2.0.8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.9:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.9"
                },
                {
                    "last_affected":  "2.0.9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.10:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.10"
                },
                {
                    "last_affected":  "2.0.10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.11:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.11"
                },
                {
                    "last_affected":  "2.0.11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.12:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.12"
                },
                {
                    "last_affected":  "2.0.12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.0.13:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.13"
                },
                {
                    "last_affected":  "2.0.13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0"
                },
                {
                    "last_affected":  "2.2.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.1"
                },
                {
                    "last_affected":  "2.2.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.2"
                },
                {
                    "last_affected":  "2.2.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.3"
                },
                {
                    "last_affected":  "2.2.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.4"
                },
                {
                    "last_affected":  "2.2.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.5"
                },
                {
                    "last_affected":  "2.2.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.6"
                },
                {
                    "last_affected":  "2.2.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:2.2.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.7"
                },
                {
                    "last_affected":  "2.2.7"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*

2.0.0

2.0.1

2.0.10

2.0.11

2.0.12

2.0.13

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.2.0

2.2.1

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11411.json"

Git / gitlab.com/wireshark/wireshark