CVE-2017-15193

Description

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.514

Associated Vulnerability

VulnerabilityOS Platform
Update of Wireshark (2.4.2)Windows
Update of Wireshark X64 (2.4.2)Windows
Vulnerabilities CVE-2017-15191,CVE-2017-15193,CVE-2017-15192 are fixed in Wireshark x64 2.2.10Windows
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.7Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.2Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.3Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.4Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.5Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.6Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.4.0Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.4.1Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.9Mac
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.8Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-306523Update of Wireshark (2.4.2)
PATCH-306524Update of Wireshark X64 (2.4.2)
PATCH-338541Wireshark (3.6.24)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234