CVE-2017-9353

Description

In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
7.995

Associated Vulnerability

VulnerabilityOS Platform
Update of Wireshark (2.2.7)Windows
Update of Wireshark X64 (2.2.7)Windows
Multiple Vulnerabilities are affected in WireShark For Mac 2.2.6Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-305833Update of Wireshark (2.2.7)
PATCH-305834Update of Wireshark X64 (2.2.7)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234