CVE-2017-11408

Description

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.603

Associated Vulnerability

VulnerabilityOS Platform
Update of Wireshark (2.2.8)Windows
Update of Wireshark X64 (2.2.8)Windows
Multiple vulnerabilities fixed in Wireshark x64 2.0.14Windows
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.4Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.5Mac
Vulnerabilities CVE-2017-11406,CVE-2017-11407,CVE-2017-11408,CVE-2017-11409 are affected in WireShark For Mac 2.0.13Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.7Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.10Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.11Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.12Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.6Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.7Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.8Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.0.9Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.4Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.5Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.6Mac
Vulnerabilities CVE-2017-11406,CVE-2017-11407,CVE-2017-11408,CVE-2017-11411,CVE-2017-11410 are fixed in Update for WireShark for Mac (2.2.8)Mac
Multiple vulnerabilities are fixed in Wireshark for Mac 2.0.14Mac
wireshark security update(DSA-4060-1) wireshark_2.2.6+g32dac6a-2+deb9u1_i386.debLinux
wireshark security update(DSA-4060-1) wireshark_2.2.6+g32dac6a-2+deb9u1_amd64.debLinux
wireshark security update(DSA-4060-1) wireshark_1.12.1+g01b65bf-4+deb8u12_i386.debLinux
wireshark security update(DSA-4060-1) wireshark_1.12.1+g01b65bf-4+deb8u12_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-306093Update of Wireshark (2.2.8)
PATCH-306094Update of Wireshark X64 (2.2.8)
PATCH-338541Wireshark (3.6.24)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-601188Update for WireShark for Mac (2.2.8)
PATCH-612949WireShark for Mac (4.6.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234