CVE-2017-17085

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-17085
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17085.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-17085
Downstream
Related
Published
2017-12-01T08:29:00.577Z
Modified
2025-11-20T10:40:47.060649Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1861a96ba1d22e80e331373cf44df029d356ec42
Last affected
32dac6a1ea518cb0062c139e2b3df298afc93c30
Last affected
34f34aa504c473a12024d5377dbe7924403aa387
Last affected
440fd4d501cf0e5aa319a97d0f874641d733e4a1
Last affected
5368c50be46d4a44986d12bdfc0a35b42c0f34fc
Last affected
57531cdd46cf170524c1fbbfd2c44132bb36e7c6
Last affected
775fb085cdfebafa565c5b428f0a130d82dbefcb
Last affected
9be0fa500da594ed01baf3214642838d22811c90
Last affected
a6fbd278e2d72ed3524995464c86929b51867802
Last affected
a9ebe59292ad3a7fff82a95bc528de48b54f9ade
Last affected
b6c63ae086b4eda0ce9f862cfe26bc79ca003db9
Last affected
cc3dc1b648d341a489fb95faef3795d8cb2b6192
Last affected
f0381b341b4d95afa1f694fc80fadc8bf4de1f76
Last affected
f42a0d2b6c659aff0390ab28e91bdd37423fe164

Affected versions

2.*

2.2.1rc0

Other

backups/ethereal@18706
ethereal-0-3-15
start

ethereal-0.*

ethereal-0.3.15

v1.*

v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0

v2.*

v2.1.0
v2.1.0rc0
v2.1.1
v2.1.1rc0
v2.1.2rc0
v2.2.0
v2.2.0rc0
v2.2.0rc1
v2.2.0rc2
v2.2.1
v2.2.1rc0
v2.2.2
v2.2.2rc0
v2.2.3
v2.2.3rc0
v2.2.4
v2.2.4rc0
v2.2.5
v2.2.5rc0
v2.2.6
v2.2.6rc0
v2.2.7
v2.2.7rc0
v2.3.0rc0
v2.4.0
v2.4.0rc0
v2.4.0rc1
v2.4.0rc2

wireshark-1.*

wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9

wireshark-2.*

wireshark-2.1.0
wireshark-2.1.1
wireshark-2.2.0
wireshark-2.2.0rc1
wireshark-2.2.0rc2
wireshark-2.2.1
wireshark-2.2.2
wireshark-2.2.3
wireshark-2.2.4
wireshark-2.2.5
wireshark-2.2.6
wireshark-2.2.7
wireshark-2.4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17085.json"