Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
BID:99894
Info
Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
| Bugtraq ID: | 99894 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-11408 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 18 2017 12:00AM |
| Updated: | Jul 18 2017 12:00AM |
| Credit: | Peter Wu |
| Vulnerable: |
Wireshark Wireshark 2.2.7 Wireshark Wireshark 2.2.6 Wireshark Wireshark 2.2.5 Wireshark Wireshark 2.2.4 Wireshark Wireshark 2.2.3 Wireshark Wireshark 2.2.2 Wireshark Wireshark 2.2.1 Wireshark Wireshark 2.2 Wireshark Wireshark 2.0.13 Wireshark Wireshark 2.0.12 Wireshark Wireshark 2.0.11 Wireshark Wireshark 2.0.10 Wireshark Wireshark 2.0.9 Wireshark Wireshark 2.0.8 Wireshark Wireshark 2.0.7 Wireshark Wireshark 2.0.6 Wireshark Wireshark 2.0.5 Wireshark Wireshark 2.0.3 Wireshark Wireshark 2.0.2 Wireshark Wireshark 2.0.4 Wireshark Wireshark 2.0.1 Wireshark Wireshark 2.0.0 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 |
| Not Vulnerable: |
Wireshark Wireshark 2.2.8 Wireshark Wireshark 2.0.14 |
Discussion
Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
An attacker can leverage this issue to crash the affected application, denying service to legitimate users.
Wireshark 2.2.0 through 2.2.7 and 2.0.0 through 2.0.13 are vulnerable.
Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.
An attacker can leverage this issue to crash the affected application, denying service to legitimate users.
Wireshark 2.2.0 through 2.2.7 and 2.0.0 through 2.0.13 are vulnerable.
Exploit / POC
Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
Solution / Fix
Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Wireshark AMQP Dissector CVE-2017-11408 Denial of Service Vulnerability
References:
References:
- Bug 1472766 - (CVE-2017-11408) CVE-2017-11408 wireshark: AMQP dissector crash (w (Red Hat)
- Wireshark Bug Database �?? Bug 13780 (Wireshark)
- Wireshark Homepage (Wireshark)
- CVE-2017-11408 (Red Hat)
- wnpa-sec-2017-34 · AMQP dissector crash (Wireshark)