CVE-2017-13765

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-13765
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13765.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-13765
Downstream
Related
Published
2017-08-30T09:29:00.450Z
Modified
2026-03-10T14:21:25.246481Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
9a73b827b22c7ce9132e939b9f07ec4425fc2aa6
Last affected
eceac99e1b7732c93c45c547c27c169a607ddd56
Introduced
5368c50be46d4a44986d12bdfc0a35b42c0f34fc
Last affected
a9ebe59292ad3a7fff82a95bc528de48b54f9ade
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9be0fa500da594ed01baf3214642838d22811c90
Database specific 
{
    "versions": [
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.14"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "last_affected": "2.2.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        }
    ]
}

Affected versions

2.*
2.2.1rc0
v2.*
v2.0.0
v2.0.1
v2.0.10
v2.0.10rc0
v2.0.11
v2.0.11rc0
v2.0.12
v2.0.12rc0
v2.0.13
v2.0.13rc0
v2.0.14
v2.0.14rc0
v2.0.1rc0
v2.0.2
v2.0.2rc0
v2.0.3
v2.0.3rc0
v2.0.4
v2.0.4rc0
v2.0.5
v2.0.5rc0
v2.0.6
v2.0.6rc0
v2.0.7
v2.0.7rc0
v2.0.8
v2.0.8rc0
v2.0.9
v2.0.9rc0
v2.2.0
v2.2.1
v2.2.1rc0
v2.2.2
v2.2.2rc0
v2.2.3
v2.2.3rc0
v2.2.4
v2.2.4rc0
v2.2.5
v2.2.5rc0
v2.2.6
v2.2.6rc0
v2.2.7
v2.2.7rc0
v2.2.8
v2.2.8rc0
wireshark-2.*
wireshark-2.0.0
wireshark-2.0.1
wireshark-2.0.10
wireshark-2.0.11
wireshark-2.0.12
wireshark-2.0.13
wireshark-2.0.14
wireshark-2.0.2
wireshark-2.0.3
wireshark-2.0.4
wireshark-2.0.5
wireshark-2.0.6
wireshark-2.0.7
wireshark-2.0.8
wireshark-2.0.9
wireshark-2.2.0
wireshark-2.2.1
wireshark-2.2.2
wireshark-2.2.3
wireshark-2.2.4
wireshark-2.2.5
wireshark-2.2.6
wireshark-2.2.7
wireshark-2.2.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13765.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    }
]