CVE-2017-15189

Description

In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.339

Associated Vulnerability

VulnerabilityOS Platform
Update of Wireshark (2.4.2)Windows
Update of Wireshark X64 (2.4.2)Windows
Multiple Vulnerabilities are affected in WireShark For Mac 2.4.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.4.1Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-306523Update of Wireshark (2.4.2)
PATCH-306524Update of Wireshark X64 (2.4.2)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234