Wireshark IrCOMM Dissector CVE-2017-13765 Denial of Service Vulnerability

Bugtraq ID:	100551
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-13765
Remote:	Yes
Local:	No
Published:	Aug 29 2017 12:00AM
Updated:	Aug 29 2017 12:00AM
Credit:	Buildbot Builder
Vulnerable:	Wireshark Wireshark 2.4 Wireshark Wireshark 2.2.8 Wireshark Wireshark 2.2.7 Wireshark Wireshark 2.2.6 Wireshark Wireshark 2.2.5 Wireshark Wireshark 2.2.4 Wireshark Wireshark 2.2.3 Wireshark Wireshark 2.2.2 Wireshark Wireshark 2.2.1 Wireshark Wireshark 2.2 Wireshark Wireshark 2.0.14 Wireshark Wireshark 2.0.13 Wireshark Wireshark 2.0.12 Wireshark Wireshark 2.0.11 Wireshark Wireshark 2.0.10 Wireshark Wireshark 2.0.9 Wireshark Wireshark 2.0.8 Wireshark Wireshark 2.0.7 Wireshark Wireshark 2.0.6 Wireshark Wireshark 2.0.5 Wireshark Wireshark 2.0.3 Wireshark Wireshark 2.0.2 Wireshark Wireshark 2.0.4 Wireshark Wireshark 2.0.1 Wireshark Wireshark 2.0.0
Not Vulnerable:	Wireshark Wireshark 2.4.1 Wireshark Wireshark 2.2.9 Wireshark Wireshark 2.0.15

Wireshark IrCOMM Dissector CVE-2017-13765 Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark IrCOMM Dissector CVE-2017-13765 Denial of Service Vulnerability

References:

• Bug 13929 - Buildbot crash output: fuzz-2017-07-28-27509.pcap (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• wnpa-sec-2017-41 · IrCOMM dissector buffer overrun (Wireshark)