Wireshark MQ Dissector CVE-2017-11407 Denial of Service Vulnerability

Bugtraq ID:	99910
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-11407
Remote:	Yes
Local:	No
Published:	Jul 18 2017 12:00AM
Updated:	Jul 18 2017 12:00AM
Credit:	Buildbot Builder
Vulnerable:	Wireshark Wireshark 2.2.7 Wireshark Wireshark 2.2.6 Wireshark Wireshark 2.2.5 Wireshark Wireshark 2.2.4 Wireshark Wireshark 2.2.3 Wireshark Wireshark 2.2.2 Wireshark Wireshark 2.2.1 Wireshark Wireshark 2.2 Wireshark Wireshark 2.0.13 Wireshark Wireshark 2.0.12 Wireshark Wireshark 2.0.11 Wireshark Wireshark 2.0.10 Wireshark Wireshark 2.0.9 Wireshark Wireshark 2.0.8 Wireshark Wireshark 2.0.7 Wireshark Wireshark 2.0.6 Wireshark Wireshark 2.0.5 Wireshark Wireshark 2.0.3 Wireshark Wireshark 2.0.2 Wireshark Wireshark 2.0.4 Wireshark Wireshark 2.0.1 Wireshark Wireshark 2.0.0 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0
Not Vulnerable:	Wireshark Wireshark 2.2.8 Wireshark Wireshark 2.0.14

Wireshark MQ Dissector CVE-2017-11407 Denial of Service Vulnerability

Wireshark is prone to a remote denial-of-service vulnerability because it fails to properly handle certain types of packets.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Wireshark 2.2.0 through 2.2.7 and 2.0.0 through 2.0.13 are vulnerable.

Wireshark MQ Dissector CVE-2017-11407 Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark MQ Dissector CVE-2017-11407 Denial of Service Vulnerability

References:

• Bug 1472767 - (CVE-2017-11407) CVE-2017-11407 wireshark: MQ dissector crash (wnp (Red Hat)
  
• Wireshark Bug Database �?? Bug 13792 (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• CVE-2017-11407 (Red Hat)
  
• wnpa-sec-2017-35 · MQ dissector crash (Wireshark)